Refine Dockerfile for better-sqlite3 build process and verification

- Updated the Dockerfile to ensure better-sqlite3 is rebuilt from source by removing prebuilds and using node-gyp.
- Added verification checks to confirm the successful compilation of better_sqlite3.node and the absence of prebuilds.
- Enhanced dependency management during the Docker build process.

Dockerfile

@@ -12,19 +12,23 @@ RUN apt-get update \
 WORKDIR /app
 
 COPY package.json package-lock.json ./
-# Compile against this image's glibc, then remove prebuilds — better-sqlite3
+# better-sqlite3 ships linux-arm64 prebuilds that need GLIBC >= 2.38; bookworm
-# always prefers prebuilds/ over build/Release, and published linux-arm64
+# has 2.36. Its gypfile skips compiling when a prebuild exists unless
-# prebuilds can require a newer GLIBC than bookworm provides.
+# --force_build=1. Remove prebuilds, then compile against this image's glibc.
 RUN npm ci \
-  && npm rebuild better-sqlite3 --build-from-source \
+  && npm install --no-save --no-audit --no-fund node-gyp \
   && rm -rf node_modules/better-sqlite3/prebuilds \
+  && cd node_modules/better-sqlite3 \
+  && npx node-gyp rebuild --release --force_build=1 \
+  && cd /app \
   && test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node
 
 COPY web ./web
 COPY src ./src
 RUN npm run build:web \
   && npm prune --omit=dev \
-  && test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node
+  && test -f node_modules/better-sqlite3/build/Release/better_sqlite3.node \
+  && test ! -d node_modules/better-sqlite3/prebuilds
 
 FROM node:22-bookworm-slim AS runner