Removed the postgresql-client and xdg-utils packages from the backend production Dockerfile as they are not used by the application.

Analysis

After investigating the codebase, I found that:

• postgresql-client: The backend uses SQLAlchemy with asyncpg for all PostgreSQL operations, not CLI tools like psql, pg_dump, etc.
• xdg-utils: This package provides desktop utilities like xdg-open which are not needed in a containerized backend service

Changes

• Removed the apt-get install commands for both packages from src/backend/Dockerfile
• Added explanatory comments documenting why the packages were removed
• Preserved the packages in .devcontainer/Dockerfile where postgresql-client may be useful for development

Verification

The codebase analysis confirmed:

• No subprocess calls or system commands that would require PostgreSQL CLI tools
• All database operations use Python libraries (SQLAlchemy, asyncpg)
• No usage of xdg-utils anywhere in the codebase
• The entrypoint script only starts the uvicorn web server

This change reduces the Docker image size and attack surface by removing unused system packages while maintaining full application functionality.

Fixes #250.

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.