feat: seed required wordpress plugins via wp-cli

docker-compose.yaml

@@ -42,6 +42,22 @@ services:
       - wordpress_network
     extra_hosts:
       - "host.docker.internal:host-gateway" # For crowdsec plugin to connect to host crowdsec api
+# One-shot WP-CLI job to seed plugins listed in config/plugins.txt
+  wpcli_seed:
+    image: wordpress:cli
+    depends_on:
+      wordpress:
+        condition: service_started
+    env_file:
+      - .env
+    volumes:
+      - ./wordpress_data:/var/www/html
+      - ./config/plugins.txt:/config/plugins.txt:ro
+      - ./scripts/seed-plugins.sh:/seed-plugins.sh:ro
+    entrypoint: ["/bin/sh", "/seed-plugins.sh"]
+    restart: "no"
+    networks:
+      - wordpress_network
 # Nginx front-end for WordPress (Traefik faces this container)
   wordpress_nginx:
     depends_on: