chore: remove Electric SQL plumbing and infrastructure

Remove all Electric SQL client code, Docker service, env vars, CI build
args, install scripts, and documentation. Feature hooks that depend on
Electric are intentionally left in place to be rewritten with Rocicorp
Zero in subsequent commits.

Deleted:
- lib/electric/ (client.ts, context.ts, auth.ts, baseline.ts)
- ElectricProvider.tsx
- docker/scripts/init-electric-user.sh
- content/docs/how-to/electric-sql.mdx

Cleaned:
- package.json (4 @electric-sql/* deps)
- app/layout.tsx, UserDropdown.tsx, LayoutDataProvider.tsx
- docker-compose.yml, docker-compose.dev.yml
- Dockerfile, docker-entrypoint.js
- .env.example (frontend, docker, backend)
- CI workflows, install scripts, docs

surfsense_web/content/docs/docker-installation/dev-compose.mdx

@@ -25,6 +25,5 @@ The following `.env` variables are **only used by the dev compose file** (they h
 | `NEXT_PUBLIC_FASTAPI_BACKEND_AUTH_TYPE` | Frontend build arg for auth type | `LOCAL` |
 | `NEXT_PUBLIC_ETL_SERVICE` | Frontend build arg for ETL service | `DOCLING` |
 | `NEXT_PUBLIC_DEPLOYMENT_MODE` | Frontend build arg for deployment mode | `self-hosted` |
-| `NEXT_PUBLIC_ELECTRIC_AUTH_MODE` | Frontend build arg for Electric auth | `insecure` |
 
 In the production compose file, the `NEXT_PUBLIC_*` frontend variables are automatically derived from `AUTH_TYPE`, `ETL_SERVICE`, and the port settings. In the dev compose file, they are passed as build args since the frontend is built from source.

surfsense_web/content/docs/docker-installation/docker-compose.mdx

@@ -18,8 +18,6 @@ After starting, access SurfSense at:
 - **Frontend**: [http://localhost:3929](http://localhost:3929)
 - **Backend API**: [http://localhost:8929](http://localhost:8929)
 - **API Docs**: [http://localhost:8929/docs](http://localhost:8929/docs)
-- **Electric SQL**: [http://localhost:5929](http://localhost:5929)
-
 ---
 
 ## Configuration
@@ -50,7 +48,6 @@ All configuration lives in a single `docker/.env` file (or `surfsense/.env` if y
 |----------|-------------|---------|
 | `FRONTEND_PORT` | Frontend service port | `3929` |
 | `BACKEND_PORT` | Backend API service port | `8929` |
-| `ELECTRIC_PORT` | Electric SQL service port | `5929` |
 
 ### Custom Domain / Reverse Proxy
 
@@ -61,7 +58,6 @@ Only set these if serving SurfSense on a real domain via a reverse proxy (Caddy,
 | `NEXT_FRONTEND_URL` | Public frontend URL (e.g. `https://app.yourdomain.com`) |
 | `BACKEND_URL` | Public backend URL for OAuth callbacks (e.g. `https://api.yourdomain.com`) |
 | `NEXT_PUBLIC_FASTAPI_BACKEND_URL` | Backend URL used by the frontend (e.g. `https://api.yourdomain.com`) |
-| `NEXT_PUBLIC_ELECTRIC_URL` | Electric SQL URL used by the frontend (e.g. `https://electric.yourdomain.com`) |
 
 ### Database
 
@@ -77,14 +73,6 @@ Defaults work out of the box. Change for security in production.
 | `DB_SSLMODE` | SSL mode: `disable`, `require`, `verify-ca`, `verify-full` | `disable` |
 | `DATABASE_URL` | Full connection URL override. Use for managed databases (RDS, Supabase, etc.) | *(built from above)* |
 
-### Electric SQL
-
-| Variable | Description | Default |
-|----------|-------------|---------|
-| `ELECTRIC_DB_USER` | Replication user for Electric SQL | `electric` |
-| `ELECTRIC_DB_PASSWORD` | Replication password for Electric SQL | `electric_password` |
-| `ELECTRIC_DATABASE_URL` | Full connection URL override for Electric. Set to `host.docker.internal` when pointing at a local Postgres instance | *(built from above)* |
-
 ### Authentication
 
 | Variable | Description |
@@ -148,7 +136,6 @@ Uncomment the connectors you want to use. Redirect URIs follow the pattern `http
 | `backend` | FastAPI application server |
 | `celery_worker` | Background task processing (document indexing, etc.) |
 | `celery_beat` | Periodic task scheduler (connector sync) |
-| `electric` | Electric SQL (real-time sync for the frontend) |
 | `frontend` | Next.js web application |
 
 All services start automatically with `docker compose up -d`.
@@ -165,7 +152,6 @@ docker compose logs -f
 
 # View logs for a specific service
 docker compose logs -f backend
-docker compose logs -f electric
 
 # Stop all services
 docker compose down
@@ -183,6 +169,4 @@ docker compose down -v
 
 - **Ports already in use**: Change the relevant `*_PORT` variable in `.env` and restart.
 - **Permission errors on Linux**: You may need to prefix `docker` commands with `sudo`.
-- **Electric SQL not connecting**: Check `docker compose logs electric`. If it shows `domain does not exist: db`, ensure `ELECTRIC_DATABASE_URL` is not set to a stale value in `.env`.
-- **Real-time updates not working in browser**: Open DevTools → Console and look for `[Electric]` errors. Check that `NEXT_PUBLIC_ELECTRIC_URL` matches the running Electric SQL address.
 - **Line ending issues on Windows**: Run `git config --global core.autocrlf true` before cloning.

surfsense_web/content/docs/docker-installation/install-script.mdx

@@ -38,4 +38,3 @@ After starting, access SurfSense at:
 - **Frontend**: [http://localhost:3929](http://localhost:3929)
 - **Backend API**: [http://localhost:8929](http://localhost:8929)
 - **API Docs**: [http://localhost:8929/docs](http://localhost:8929/docs)
-- **Electric SQL**: [http://localhost:5929](http://localhost:5929)