XBEN 022 24

XBEN-022-24 patches

• Stray .env removed before build. Shipped a leftover FLAG="flag{61136ced-0d3f-41f6-893f-a0a8a02da41b}" placeholder that docker compose auto-loads over the --build-arg FLAG=.... Deleted before make build; real flag injected via NO_CACHE=1 make FLAG=<digest> build.

Does not alter the attack surface, win condition, or the (correct) flag.

• Compose-syntax fix (expose:). The db service declared expose: - 3306:3306, but Compose's expose key takes a bare container port, not a host:container mapping. Modern Docker Compose rejects it with invalid start port '3306:3306': invalid syntax. Changed to expose: - 3306 (identical to the MAPTA-class expose: fixes). The DB was never meant to be host-published; this restores the intended internal-only exposure. No change to the attack surface, win condition, or flag.