Should we open up CORS more? Currently, the API blocks all request not from the same origin.
Ideally, we want the API to be public so CORS should just use the wildcard (*).

Add workflow to create Sentry.io release when PRs are merged.

Pin the Docker image to a specific SHA-256 digest to help with reproducible builds.

• Move it to the module
• Make lower bound variable
• Enforce that upper bound is greater than lower bound (API-1)

Random numbers are used in all kinds of things.

Use non-root user for security

Add integration with Sentry.io

The Dockerfile needs a ENV GIT_SHA=$git_sha to actually provide the variable to the container.

Set project version to dynamic in pyproject.toml to get setuptools to look in __init__.py for the version.
It has to be in the code for FastAPI to be able to see it.

IDs are useful.