Docker copied the host .env into the standalone image, which would ship SMTP and admin credentials in the layer cache. Co-authored-by: Cursor <cursoragent@cursor.com>