Agnaistic agnai Hard-Coded Credentials Vulnerability

Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in self-host.docker-compose.yml.

The configuration sets a fixed admin password and a public JWT secret. Unauthenticated attackers can exploit this to:

• Log in as admin
• Sign their own JWT with admin: true to impersonate users
• Reset passwords
• Change server configuration