fix: bake source into container image for production builds

Install deps from requirements.txt for better layer caching and COPY
src/ into the image so pushed artifacts are self-contained. Remove
VOLUME /app/src -- runtime config mount (/data) is sufficient.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Containerfile

@@ -2,18 +2,15 @@ FROM python:3.12-slim
 
 WORKDIR /app
 
-RUN pip install --no-cache-dir \
-    "python-socks[asyncio]>=2.4" \
-    "aiosqlite>=0.19" \
-    "aiohttp>=3.9" \
-    "aiohttp-socks>=0.8" \
-    "cryptography>=41.0"
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY src/ /app/src/
 
 ENV PYTHONUNBUFFERED=1
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONPATH=/app/src
 
-VOLUME /app/src
 VOLUME /data
 
 ENTRYPOINT ["python", "-m", "bouncer"]