Add apparmor:unconfined to all services for Proxmox LXC compatibility

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.prod.yml

@@ -2,6 +2,8 @@ services:
   db:
     image: postgres:16-alpine
     restart: unless-stopped
+    security_opt:
+      - apparmor:unconfined
     environment:
       POSTGRES_USER: ${POSTGRES_USER:?Set POSTGRES_USER in .env.production}
       POSTGRES_PASSWORD: ${POSTGRES_PASSWORD:?Set POSTGRES_PASSWORD in .env.production}
@@ -17,6 +19,8 @@ services:
   minio:
     image: minio/minio:latest
     restart: unless-stopped
+    security_opt:
+      - apparmor:unconfined
     environment:
       MINIO_ROOT_USER: ${MINIO_ACCESS_KEY:?Set MINIO_ACCESS_KEY in .env.production}
       MINIO_ROOT_PASSWORD: ${MINIO_SECRET_KEY:?Set MINIO_SECRET_KEY in .env.production}
@@ -31,6 +35,8 @@ services:
 
   minio-init:
     image: minio/mc:latest
+    security_opt:
+      - apparmor:unconfined
     depends_on:
       minio:
         condition: service_healthy
@@ -47,6 +53,8 @@ services:
 
   migrate:
     image: node:20-alpine
+    security_opt:
+      - apparmor:unconfined
     depends_on:
       db:
         condition: service_healthy
@@ -65,6 +73,8 @@ services:
   app:
     image: jpscott84/drinktracker:latest
     restart: unless-stopped
+    security_opt:
+      - apparmor:unconfined
     ports:
       - "3000:3000"
     depends_on: