Устранить уязвимости backend-образа

graphify-out/reflections/LESSONS.md

@@ -1,19 +1,20 @@
 # Lessons
 
-_Auto-generated by `graphify reflect` from 14 session memories in graphify-out/memory/. Deterministic; no LLM. Use for orientation — verify before relying, and revisit dead ends if the code has changed since._
+_Auto-generated by `graphify reflect` from 16 session memories in graphify-out/memory/. Deterministic; no LLM. Use for orientation — verify before relying, and revisit dead ends if the code has changed since._
 
 ## Summary
 
-- 13 useful · 1 dead ends · 0 corrected · 0 unmarked
+- 15 useful · 1 dead ends · 0 corrected · 0 unmarked
 
 ## Lessons
 
 **Preferred sources** — corroborated by ≥2 useful results; start here.
 
+- `Workflow сборки и публикации Docker-образов` (4× useful)
+- `Production-инфраструктура Kubernetes` (3× useful)
 - `ScheduleGeneratorService` (3× useful)
 - `TenantRoutingDataSource` (3× useful)
-- `Production-инфраструктура Kubernetes` (2× useful)
-- `Workflow сборки и публикации Docker-образов` (2× useful)
+- `Политика JWT-секрета` (2× useful)
 - `TenantConfigWatcher` (3× useful)
 - `AuthorizationInterceptor` (3× useful)
 - `Semester` (2× useful)
@@ -25,10 +26,13 @@ _Auto-generated by `graphify reflect` from 14 session memories in graphify-out/m
 
 **Tentative** — useful in fewer than 2 results; verify before relying.
 
+- `CI/CD Gitea Actions в инфраструктуре` (1× useful)
+- `Pipeline backend-образа` (1× useful)
+- `Pipeline frontend-образа` (1× useful)
+- `Job деплоя в Kubernetes` (1× useful)
 - `PostgreSQL-сервис Docker Compose` (1× useful)
 - `Flyway-миграции` (1× useful)
 - `Tenants ConfigMap` (1× useful)
-- `Политика JWT-секрета` (1× useful)
 - `AcademicCalendar` (1× useful)
 - `Department` (1× useful)
 - `StudentGroup` (1× useful)