feat: harden containers and ci

README.md

@@ -83,6 +83,16 @@ RATE_LIMIT_MAX=100
 
 # Uploads directory (overridable if you mount elsewhere)
 UPLOAD_DIR=uploads/resumes
+
+# Optional entrypoint controls
+RUN_MIGRATIONS=true
+RUN_SEED=false
+
+# Database pool and wait tuning (milliseconds)
+DB_POOL_MAX=10
+DB_POOL_IDLE_MS=30000
+DB_POOL_CONNECTION_TIMEOUT_MS=5000
+DB_WAIT_TIMEOUT_MS=60000
 ```
 
 Set `POSTGRES_PASSWORD` and `JWT_SECRET` before launching the stack. See `.env.example` for the full list.
@@ -165,6 +175,7 @@ To mirror CI in one shot, run the helper script from the repository root:
 ```
 
 The script executes linting followed by the backend and frontend test suites (each with coverage reporting). Coverage thresholds are enforced by Jest to guard against regressions.
+The helper waits for the ad-hoc PostgreSQL container, honours the backend entrypoint (which now blocks on database readiness, runs migrations, and optionally seeds), and then runs both suites with coverage thresholds enforced.
 
 ## Continuous Integration