- Optimized Backoffice Dockerfile: node:22-alpine -> gcr.io/distroless/nodejs22-debian12 - Optimized BFF Dockerfile: python:3.12-slim -> gcr.io/distroless/python3-debian12 - Updated Backoffice Auth to use JWT_SECRET for local verification - Updated .env.example with correct env vars
- Backend (Go): Use scratch image (~5MB), add build cache for modules - Backoffice (NestJS): Add pnpm cache, alpine image, fix Prisma client copy - BFF (Python): Add multi-stage with virtualenv, pip cache, optimized env vars - All: Add non-root users for security