CTF benchmark stack API healthcheck failed because production env and image health probe were incomplete

A local Docker Compose benchmark stack could not become healthy even though the API process eventually listened on its port. Startup initially failed because a required production anti-bot secret was absent; after adding a deterministic CTF-only dummy value, the API served /health but Docker still reported unhealthy because the healthcheck used wget in an image that did not include wget.