Replace drifting cron loops with persistent cadence-tracked workers and CI-verifiable Compose wiring.
Resolve recommended-profile Critical and High findings, retain narrow analyzer exceptions, and update the edge-broker WebSocket dependency to a non-vulnerable release.