- compose: keep DataProtection keys in a named volume so redeploying no
longer logs everybody out
- seed default family members at startup (init.sql only runs on a fresh
MySQL volume, existing databases never got new members like Mattis)
- editors no longer need the paszin to submit an article or edit their
own article; the editor session now survives submitting/editing
(previously the paszin flow replaced or signed out the editor cookie)
The blanket *.sql ignore rule (meant for database dumps) also excluded
deploy/mysql/init.sql, so it was never committed. On a fresh clone the
compose bind mount resolves to a missing file, MySQL skips schema
initialization, and every database-backed page throws.
douwe