Remove axios from the realtime server dependencies to avoid header injection risk, switch Docker builds to npm ci, and bump the realtime image version to 1.0.15.