- Mail: Use verify_peer=false for internal Docker SMTP (self-signed cert on
  srv-captain--mail). Without this, STARTTLS fails with certificate verify
  error and no emails are sent.
- Livewire: Add livewire:publish --assets to entrypoint.sh so the JS file
  is available after container restarts (assets live in public/ which isn't
  in a persistent volume).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>