- scripts/docker-update.sh: git pull --ff-only, host db:migrate, docker compose build + up -d, health-check wait, keeps host-side PM2 'next' stopped. Fails safe on dirty working tree (exit 1) and on health failure (exit 3). - cron entry: daily 03:30 -> logs/docker-update.cron.log - README: Automatic Updates section + docker commands row
