justice-bac is wiring Mike up to run behind a government firewall

Most forks of Mike chase features. justice-bac is solving a quieter problem: getting the app to work inside a locked-down corporate network and ship to a real production host. The first half tackles a wall that stops a lot of legal software cold - a corporate VPN that inspects encrypted traffic and, in doing so, breaks the app's connection to outside services like Supabase, the hosted database Mike relies on. The fix teaches Mike to trust the Government of Canada's own security certificate, so those connections succeed instead of silently failing.

The second half makes Mike deployable to Fly.io, a cloud hosting platform, with a single provisioning script that sorts out secrets, generates anything missing, and retries flaky builds - plus a continuous-deployment pipeline so updates ship automatically.