fix(mukke): lint fixes, rate limiting, DB indexes, and prod config

- Add ThrottlerModule rate limiting to backend
- Add DB indexes on userId, songId, playlistId columns
- Lint/formatter fixes from pre-commit hooks
- Add GlitchTip error tracking to docker-compose.macmini.yml
- Add glitchtip.mana.how to cloudflared tunnel config

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker-compose.macmini.yml

@@ -1905,6 +1905,51 @@ services:
 # Volumes (Naming: mana-{service}-data)
 # ============================================
 
+  # ============================================
+  # GlitchTip Error Tracking (Sentry-compatible)
+  # ============================================
+
+  glitchtip:
+    image: glitchtip/glitchtip:latest
+    container_name: mana-mon-glitchtip
+    restart: always
+    environment:
+      DATABASE_URL: postgres://postgres:${POSTGRES_PASSWORD:-mana123}@postgres:5432/glitchtip
+      SECRET_KEY: ${GLITCHTIP_SECRET_KEY:-change-me-in-production}
+      PORT: "8020"
+      GLITCHTIP_DOMAIN: https://glitchtip.mana.how
+      DEFAULT_FROM_EMAIL: glitchtip@mana.how
+      CELERY_WORKER_AUTOSCALE: "1,3"
+      ENABLE_USER_REGISTRATION: "false"
+    ports:
+      - "8020:8020"
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    healthcheck:
+      test: ["CMD", "wget", "-q", "--spider", "http://localhost:8020/_health/"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+
+  glitchtip-worker:
+    image: glitchtip/glitchtip:latest
+    container_name: mana-mon-glitchtip-worker
+    restart: always
+    command: ./bin/run-celery-with-beat.sh
+    environment:
+      DATABASE_URL: postgres://postgres:${POSTGRES_PASSWORD:-mana123}@postgres:5432/glitchtip
+      SECRET_KEY: ${GLITCHTIP_SECRET_KEY:-change-me-in-production}
+      GLITCHTIP_DOMAIN: https://glitchtip.mana.how
+      CELERY_WORKER_AUTOSCALE: "1,3"
+    depends_on:
+      postgres:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+
 volumes:
   redis_data:
     name: mana-redis-data