chore: phase 0 reproducible docker/dev setup with version pinning

README.md

@@ -22,8 +22,22 @@ needs judgment. Every step is documented and traceable.
   deploy to the lightweight LFX runtime and can run synchronously or streamed.
 - **Approvals** — a flow can pause and ask a human for a decision. Approving
   can automatically start a follow-up ("continuation") flow.
-- **Web UI** — three tabs: *Vorgänge* (flows and runs), *Freigaben*
-  (approvals), *Administration* (import, sync, deploy).
+- **Access management** — public landing page (German) with an access-request
+  form (request + approval). Approved users get a passwordless magic-link
+  invite by email (SMTP via `.env`); sessions are HttpOnly cookies, tenants
+  come from the session. First admin via `POST /api/auth/admin-bootstrap`
+  (only on an empty user table, email must be in `ADMIN_EMAILS`).
+- **Dynamic forms** — flows declare form fields as typed inputs on a
+  `CustomInput*` custom component (reusable library in
+  `backend/components/`, mounted into Langflow via
+  `LANGFLOW_COMPONENTS_PATH`). `GET /api/flows/{id}/input-schema` derives a
+  JSON Schema + RJSF uiSchema from the deployed version; the webapp renders
+  the matching form automatically. Flows without such a node fall back to a
+  single textarea.
+- **Web UI** — landing page (*Start*), access request (*Zugang*), and the
+  logged-in webapp: *Workflows* (choose + run with dynamic form),
+  *Aufgaben* (approvals), *Verwaltung* (admin: access requests, import,
+  sync, deploy).
 
 ## Infrastructure