Never fail the boot on operator env; drop unusable ADMIN_PERMISSIONS with a warning

compose.override.yml

@@ -22,14 +22,17 @@ services:
       # Mount your own menu/branding override into the empty config/ dir (defaults apply otherwise):
       # - ./config:/app/config:ro   # your config/menu.ts — see examples/config/menu.ts for a template
 
-  # The seed grants what the installed plugins declare, so bootstrap must discover the same plugins
-  # as web. Only dev needs saying: the base file gives both services the image's baked plugins/, and
-  # it is the `.:/app` above — dev-only — that makes web diverge onto the host tree. Mirror it here
-  # rather than in the base file, where it would instead desynchronise them (and collide with the
-  # e2e stacks, which mount individual plugins *inside* this path).
+  # Mirror web's source mount so bootstrap discovers the same plugins *and* runs the same code. Only
+  # dev needs saying: the base file gives both services the image's baked copy, and it is the
+  # `.:/app` above — dev-only — that makes web diverge onto the host tree. Without the mirror,
+  # bootstrap silently runs whatever `src/` was baked at image-build time, so an edit to
+  # bootstrap.ts appears to do nothing until someone remembers `--build`.
+  # It belongs here and not in the base file, where it would desynchronise prod and collide with the
+  # e2e stacks, which bind individual plugins *inside* /app/plugins.
   bootstrap:
     volumes:
-      - ./plugins:/app/plugins:ro
+      - .:/app
+      - /app/node_modules
 
   # Mock backend ready for the reference plugin (examples/plugins/scheduling): plugins/ ships empty, so
   # the plugin is opt-in — `cp -r examples/plugins/scheduling plugins/scheduling`, restart, and this