fix: Rust 1.88, system libsodium, runtime deps, macos runner

Author: illegalcall

Dockerfile

@@ -7,17 +7,18 @@ COPY dashboard/ .
 RUN npm run build
 
 # ── Stage 2: Build Rust backend (with embedded frontend) ────────────
-FROM rust:1.85-slim AS backend-build
+FROM rust:1.88-slim AS backend-build
 WORKDIR /app
-RUN apt-get update && apt-get install -y pkg-config libssl-dev build-essential autoconf automake libtool && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y --no-install-recommends pkg-config libssl-dev gcc libc6-dev make libsodium-dev && rm -rf /var/lib/apt/lists/*
 COPY Cargo.toml Cargo.lock ./
 COPY crates/ crates/
 COPY --from=frontend-build /app/dashboard/dist dashboard/dist
+ENV SODIUM_USE_PKG_CONFIG=1
 RUN cargo build --release --bin fishnet --features embed-dashboard
 
 # ── Stage 3: Runtime (single binary, no extra files) ────────────────
 FROM debian:bookworm-slim AS runtime
-RUN apt-get update && apt-get install -y ca-certificates && rm -rf /var/lib/apt/lists/*
+RUN apt-get update && apt-get install -y --no-install-recommends ca-certificates libsodium23 && rm -rf /var/lib/apt/lists/*
 RUN useradd -m -s /bin/bash fishnet
 
 WORKDIR /home/fishnet