v0.1.8

• Each database password is set once. The settings build both DSNs from it, percent-encoded, with <PREFIX>_DATABASE_HOST and <PREFIX>_DATABASE_PORT as overrides.
• e2e rules in ARCHITECTURE.md: one flow per user journey through the HTTP API, no per-operation files or SQL fixtures, read-only psql only for invariants the API can't show, flows run by hand.
• New accounts_flow.py (accounts on): passkey sign-up, sign-out, sign-in with a software authenticator.
• Shared e2e modules by concern (http_client.py, flow_report.py), and each run gets its own compose project, so flows can run side by side.

Update by hand

An app made with v0.1.7 or earlier keeps each database password twice. After copier update:

• In .env, replace <PREFIX>_DATABASE_URL with <PREFIX>_APPLICATION_DATABASE_PASSWORD, set to the password from that URL.
• In .env.database-owner, delete <PREFIX>_MIGRATION_DATABASE_URL and <PREFIX>_APPLICATION_DATABASE_PASSWORD, leaving POSTGRES_PASSWORD.
• Run docker compose up -d --build --wait. Do the same in the production env files before the next deploy/deploy.sh.