Rotate Gunicorn access logs in Docker Compose

[Michael-C-Strobel]

Summary

• Add a lightweight logrotate sidecar to the production Docker Compose configuration.
• Rotate the web and API Gunicorn access logs at 100 MB.
• Retain five rotations and compress older files.
• Check log sizes every 15 minutes.
• Use copytruncate, avoiding host cron configuration and Docker-socket access.
• Keep access logs out of container stdout/stderr.

Motivation

The bind-mounted Gunicorn access logs bypass Docker's existing json-file
limits and currently grow without bounds. On the production host, the web and
API access logs had grown to approximately 10.6 GB and 3.5 GB.

Validation

• Production Compose configuration validates successfully.
• The logrotate configuration parses successfully.
• The Alpine/logrotate sidecar image builds successfully.
• The sidecar startup script passes shell syntax validation.

[Michael-C-Strobel]

Closing this as superseded by the logging-only approach. We are preserving the existing access-log behavior and full history, while limiting only Docker JSON stdout/stderr logs in the relevant service repositories.