fix: remove private deployment metadata and retain release licenses

deploy/Dockerfile.runtime-update

@@ -8,6 +8,7 @@ COPY requirements.lock /app/requirements.expected.lock
 RUN python -c "from pathlib import Path; assert Path('/app/requirements.lock').read_bytes() == Path('/app/requirements.expected.lock').read_bytes(), 'Dependency lock changed; use the full Dockerfile'"
 COPY pigway_frame_flow /app/pigway_frame_flow
 COPY vendor /app/vendor
+COPY LICENSE NOTICE.md /app/
 # Publish only the cleaned filesystem, without retaining build-stage layers.
 RUN rm -rf /usr/local/lib/python*/site-packages/pip \
       /usr/local/lib/python*/site-packages/pip-*.dist-info \

deploy/compose.ubuntu-photos-api.yml

@@ -9,8 +9,8 @@ services:
     init: true
     user: "10333:10333"
     ports:
-      - "${FRAME_FLOW_BIND:-192.0.2.10}:81:18787"
-    env_file: ${FRAME_FLOW_ENV_FILE:-/srv/pigway/apps/pigway-frame-flow/.env}
+      - "${FRAME_FLOW_BIND:-127.0.0.1}:81:18787"
+    env_file: ${FRAME_FLOW_ENV_FILE:?Set the private environment file path}
     environment:
       TZ: Asia/Shanghai
       DATA_DIR: /data
@@ -23,12 +23,12 @@ services:
       TMPDIR: /data/tmp
     volumes:
       - type: bind
-        source: /srv/pigway/apps/pigway-frame-flow/data
+        source: ${FRAME_FLOW_APP_DIR:?Set the existing application directory}/data
         target: /data
         bind:
           create_host_path: false
       - type: bind
-        source: /srv/pigway/apps/pigway-frame-flow/config
+        source: ${FRAME_FLOW_APP_DIR:?Set the existing application directory}/config
         target: /config
         bind:
           create_host_path: false