feat(docker): upgrade runtime to Node 22 and add postgres support

- Bump Dockerfile NODE_VERSION 20 -> 22
- Add pg driver dependency to @objectos/server so the postgres
  datasource works out of the box (pg is an optional peer of
  @objectstack/driver-sql)
- Pass OS_SECRET_KEY / OS_AUTH_SECRET / OS_CORS_ORIGIN through in
  docker-compose so production boots (LocalCryptoProvider requires a
  stable secret) and CSRF trusted origins can be configured

Author: baozhoutao

apps/objectos/package.json

@@ -22,7 +22,8 @@
     "@objectstack/metadata": "^10.2.0",
     "@objectstack/objectql": "^10.2.0",
     "@objectstack/runtime": "^10.2.0",
-    "@objectstack/spec": "^10.2.0"
+    "@objectstack/spec": "^10.2.0",
+    "pg": "^8.0.0"
   },
   "devDependencies": {
     "@types/node": "^25.9.1",

docker/Dockerfile

@@ -2,11 +2,11 @@
 #
 # ObjectOS runtime image
 # -----------------------------------------------------------------------
-# Multi-stage build producing a minimal Node 20 runtime that boots
+# Multi-stage build producing a minimal Node 22 runtime that boots
 # `apps/objectos` against either an Artifact API or a local artifact file.
 # -----------------------------------------------------------------------
 
-ARG NODE_VERSION=20
+ARG NODE_VERSION=22
 ARG PNPM_VERSION=10.28.2
 
 # ---------- builder ----------

docker/docker-compose.yml

@@ -13,6 +13,9 @@ services:
       OS_PROJECT_ID: ${OS_PROJECT_ID:-}
       OS_ARTIFACT_FILE: ${OS_ARTIFACT_FILE:-/artifacts/objectstack.json}
       OS_BUSINESS_DB_URL: ${OS_BUSINESS_DB_URL:-file:/var/lib/objectos/data.db}
+      OS_SECRET_KEY: ${OS_SECRET_KEY:-}
+      OS_AUTH_SECRET: ${OS_AUTH_SECRET:-}
+      OS_CORS_ORIGIN: ${OS_CORS_ORIGIN:-}
       OS_CACHE_DIR: /var/cache/objectos
       PORT: 3000
     volumes: