Fix Wave 2 review: PG18 volume path, null guards, NotAuthorized redirect, drop docker-compose, port 5433 connection strings

DeepDrftWeb.Client/Program.cs

@@ -15,6 +15,7 @@ Startup.ConfigureContentServices(builder.Services, contentApiUrl);
 Startup.ConfigureDomainServices(builder.Services);
 
 // AuthBlocks WASM: auth state deserialization bridge (prerender → WASM handoff).
+// Registers AddAuthorizationCore, AddCascadingAuthenticationState, AddAuthenticationStateDeserialization.
 AuthBlocksWeb.Client.Startup.ConfigureServices(builder.Services);
 
 var app = builder.Build();