docker build sets next_public_app_url to localhost; preferring it over runtime auth_url made prod share links point at localhost:3000.