fix: gunicorn control socket error and host bytecode in the image

Found by running the container on Docker Desktop. Disable gunicorn's control
socket (the home directory is read-only) and ignore __pycache__ and .pyc at
any depth so host bytecode with the Windows source path stays out of the image.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sk72AxLwQnYttF6VFSxQLt

docker/entrypoint.sh

@@ -9,4 +9,5 @@ exec gunicorn portal.config.wsgi:application \
     --threads 4 \
     --preload \
     --worker-tmp-dir /tmp \
-    --error-logfile -
+    --error-logfile - \
+    --no-control-socket