fix: remove sysctls and bad command from db service, clean compose file

docker-compose.yml

@@ -2,10 +2,6 @@ services:
   db:
     image: postgres:16-alpine
     restart: unless-stopped
-    # Disable sysctl tuning — required for unprivileged LXC environments
-    command: postgres -c ipc_lock=off
-    sysctls:
-      net.ipv4.ip_unprivileged_port_start: 0
     volumes:
       - postgres_data:/var/lib/postgresql/data
     environment:
@@ -51,8 +47,6 @@ services:
       - static_files:/app/staticfiles
 
   # Runs the nightly coordinator status check (django-crontab job)
-  # Avoids needing a cron daemon inside the web container, which causes
-  # runc PID errors in unprivileged LXC environments.
   cron:
     build: .
     restart: unless-stopped