- _fetch_and_index now extracts img src URLs, filters junk, stores in OpenSearch
- get_db() uses PGHOST/PGUSER/etc env vars for Docker compatibility
- search endpoint returns images + image_count in hits
- Docker run command passes all PG env vars
- Discovery script runs via SSH to CT to avoid VPN issues