fix: docker build error visibility + .dockerignore

- _build_image stderr was truncated to 500 chars, hiding apt errors
- Now captures 3000 chars of combined stdout+stderr with --progress=plain
- .dockerignore excludes .git/venv/dist/build from context (1.2G -> ~95MB)
- README cell internals wording cleanup

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Session-Id: 80f30d89-8f55-47d5-9fc2-2c47e009c4c7
Session-Msg: 552

Author: damiandelmas

.dockerignore

@@ -0,0 +1,8 @@
+.git
+venv
+dist
+build
+*.egg-info
+__pycache__
+.pytest_cache
+.mypy_cache

README.md

@@ -90,8 +90,6 @@ hubs:         9d1e3f3d "FlexSearch SQL engine" (centrality: 0.0045)
 presets:      @digest @story @genealogy @file @sprints @bridges ...
 ```
 
-3,000 tokens. Most of it is the schema itself. That's the entire onboarding.
-
 ---
 
 ## modulation tokens
@@ -195,13 +193,13 @@ Capture any query as a preset. Ship with your module. Discoverable via `@orient`
 
 <details><summary>cell internals</summary>
 
-The prefix declares the lifecycle, the mutability, the writer. No manifest. No config. The database describes itself.
+The prefix convention declares the intended lifecycle. Not enforced — semantic contract.
 
 ```
-_raw_*      immutable     content, embeddings      written by compile
+_raw_*      write-once    content, embeddings      written by compile
 _edges_*    append-only   relationships             written by compile or modules
-_types_*    immutable     classification            written by compile
-_enrich_*   mutable       graph scores              written by manage
+_types_*    write-once    classification            written by compile
+_enrich_*   rebuildable   graph scores              written by manage
 ```
 
 Graph intelligence — centrality, hub status, community membership — lives in `_enrich_*` columns.

tests/docker/run_all.py

@@ -134,13 +134,18 @@ def _model_mount_args(suite: dict) -> list[str]:
 def _build_image(dockerfile: str, image: str) -> tuple[bool, str]:
     """Build Docker image. Returns (success, error_output)."""
     r = subprocess.run(
-        ["docker", "build",
+        ["docker", "build", "--progress=plain",
          "-f", str(DOCKER_DIR / dockerfile),
          "-t", image,
          str(REPO_ROOT)],
         capture_output=True, text=True, timeout=300,
     )
-    return r.returncode == 0, r.stderr[-500:] if r.returncode != 0 else ""
+    if r.returncode != 0:
+        # Show full output so apt/pip errors aren't truncated
+        combined = (r.stdout or "") + "\n" + (r.stderr or "")
+        # Find the failing step output — last 3000 chars is enough context
+        return False, combined[-3000:]
+    return True, ""
 
 
 def _run_suite(name: str, suite: dict, *, record: bool = False) -> dict: