- Create deploy/docker/backend-dev.Dockerfile: single-stage, root, includes xauth, x11vnc, novnc, websockify, xvfb, Playwright+chromium, Python3+pip+ocr-worker (--break-system-packages) - Use HTTP (not HTTPS) for apt mirrors per BuildKit TLS note - Update docker-compose.dev.yml backend to point to backend-dev.Dockerfile - .dockerignore unchanged (no issues found)