fix(deploy): add analytics.duckdb bind-mount to docker-compose.prod.yml

App containers need access to the serving DuckDB populated by the
pipeline supervisor. Bind-mounts /data/materia/analytics.duckdb as
read-only and sets SERVING_DUCKDB_PATH in container environment.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

web/docker-compose.prod.yml

@@ -33,8 +33,10 @@ services:
     env_file: ./.env
     environment:
       - DATABASE_PATH=/app/data/app.db
+      - SERVING_DUCKDB_PATH=/data/materia/analytics.duckdb
     volumes:
       - app-data:/app/data
+      - /data/materia/analytics.duckdb:/data/materia/analytics.duckdb:ro
     networks:
       - net
     healthcheck:
@@ -82,8 +84,10 @@ services:
     env_file: ./.env
     environment:
       - DATABASE_PATH=/app/data/app.db
+      - SERVING_DUCKDB_PATH=/data/materia/analytics.duckdb
     volumes:
       - app-data:/app/data
+      - /data/materia/analytics.duckdb:/data/materia/analytics.duckdb:ro
     networks:
       - net
     healthcheck: