fix: secure generated project defaults

[cloudcarver]

Summary

• remove the preset test account and documented fixed credentials
• require a generated local PostgreSQL password through an ignored environment file
• stop publishing the generated development database port
• bind the required E2E database publication to loopback and randomize its password
• add generated-project and Compose regression tests

Validation

• go test ./...
• go test -race ./cmd/anclax ./e2e
• go vet ./...
• make gen

Closes #35
Closes #38