feat: harden community production foundation through story 1.5

apps/ui/scripts/playwright-stack.sh

@@ -67,7 +67,8 @@ cleanup() {
   kill_port_processes "$MCP_PORT"
 }
 
-trap cleanup EXIT INT TERM
+trap cleanup EXIT
+trap 'exit 130' INT TERM
 
 cleanup
 
@@ -131,7 +132,13 @@ mkdir -p "$CRANK_STORAGE_ROOT"
 
 (
   cd "$ROOT_DIR"
-  cargo run -p admin-api >"$LOG_DIR/admin-api.log" 2>&1
+  cargo run -p admin-api --bin crank-migrate -- apply >"$LOG_DIR/migrate.log" 2>&1
+)
+
+(
+  cd "$ROOT_DIR"
+  exec env -u CRANK_MCP_BIND -u CRANK_MCP_REFRESH_MS \
+    cargo run -p admin-api --bin admin-api >"$LOG_DIR/admin-api.log" 2>&1
 ) &
 echo $! > "$TMP_DIR/admin-api.pid"
 
@@ -141,7 +148,11 @@ done
 
 (
   cd "$ROOT_DIR"
-  cargo run -p mcp-server >"$LOG_DIR/mcp-server.log" 2>&1
+  exec env -u CRANK_ADMIN_BIND -u CRANK_STORAGE_ROOT -u CRANK_SESSION_SECRET \
+    -u CRANK_PASSWORD_PEPPER -u CRANK_SESSION_TTL_HOURS \
+    -u CRANK_BOOTSTRAP_ADMIN_EMAIL -u CRANK_BOOTSTRAP_ADMIN_PASSWORD \
+    -u CRANK_BOOTSTRAP_ADMIN_DISPLAY_NAME -u CRANK_DEMO_SEED \
+    cargo run -p mcp-server >"$LOG_DIR/mcp-server.log" 2>&1
 ) &
 echo $! > "$TMP_DIR/mcp-server.pid"
 
@@ -151,7 +162,7 @@ done
 
 (
   cd "$ROOT_DIR/apps/ui"
-  node scripts/playwright-ui-server.js >"$LOG_DIR/ui-server.log" 2>&1
+  exec node scripts/playwright-ui-server.js >"$LOG_DIR/ui-server.log" 2>&1
 ) &
 echo $! > "$TMP_DIR/ui-server.pid"