include shared source in runtime image

docs/quality/evidence/qa-container-runtime.json

@@ -0,0 +1,14 @@
+{
+  "date": "2026-09-06",
+  "image": "ihaleist-qa:local",
+  "checks": {
+    "nginxConfigTest": "successful",
+    "apiHealth": {"status": 200, "body": {"ok": true}},
+    "staticSecurityHeaders": {
+      "x-content-type-options": "nosniff",
+      "referrer-policy": "no-referrer",
+      "permissions-policy": "camera=(), microphone=(), geolocation=()"
+    }
+  },
+  "scope": "Local Docker image; no production deployment or external side effect"
+}