Enhance Git LFS validation in CI workflow and update Docker Compose configuration

.forgejo/workflows/publish-faceai-container.yml

@@ -28,6 +28,8 @@ jobs:
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+        with:
+          lfs: true
 
       - name: Validate workflow variables
         run: |
@@ -41,6 +43,34 @@ jobs:
           if [ ! -f "faceai/package.json" ]; then echo "faceai/package.json is missing from the repository checkout"; exit 1; fi
           if [ ! -f "bin/Face_Recognition_Unix/face_matcher" ]; then echo "bin/Face_Recognition_Unix/face_matcher is missing from the repository checkout"; exit 1; fi
 
+      - name: Validate Git LFS checkout for matcher binary
+        run: |
+          set -eu
+          if ! command -v git >/dev/null 2>&1; then
+            echo "git is required to validate Git LFS checkout"
+            exit 1
+          fi
+
+          if ! git lfs version >/dev/null 2>&1; then
+            echo "git-lfs is required on the runner so the processor image can include the real matcher binary"
+            exit 1
+          fi
+
+          git lfs pull --include="bin/Face_Recognition_Unix/face_matcher"
+
+          if grep -q "https://git-lfs.github.com/spec/v1" bin/Face_Recognition_Unix/face_matcher; then
+            echo "bin/Face_Recognition_Unix/face_matcher is still an LFS pointer, not the real binary"
+            exit 1
+          fi
+
+          MATCHER_SIZE="$(wc -c < bin/Face_Recognition_Unix/face_matcher | tr -d '[:space:]')"
+          if [ "${MATCHER_SIZE}" -lt 1000000 ]; then
+            echo "bin/Face_Recognition_Unix/face_matcher is unexpectedly small (${MATCHER_SIZE} bytes) and does not look like the real binary"
+            exit 1
+          fi
+
+          echo "Validated Git LFS checkout for matcher binary (${MATCHER_SIZE} bytes)"
+
       - name: Validate registry secrets
         run: |
           set -eu