- compose: keep DataProtection keys in a named volume so redeploying no
longer logs everybody out
- seed default family members at startup (init.sql only runs on a fresh
MySQL volume, existing databases never got new members like Mattis)
- editors no longer need the paszin to submit an article or edit their
own article; the editor session now survives submitting/editing
(previously the paszin flow replaced or signed out the editor cookie)