update license

APP/Dockerfile

@@ -4,6 +4,11 @@ WORKDIR /app
 COPY package.json package-lock.json ./
 RUN npm ci --legacy-peer-deps
 COPY . .
+# Kendo Angular license: passed in as a build-arg (sourced from a Gitea Actions
+# secret), exposed to `npm run build` as the env var kendo-licensing reads. Not
+# baked into any image layer beyond this build stage (the runtime stage is nginx).
+ARG KENDO_UI_LICENSE
+ENV KENDO_UI_LICENSE=${KENDO_UI_LICENSE}
 RUN npm run build           # -> dist/client-bridge/browser  (production by default)
 
 # ---- runtime ----