Get grover & puppeteer working in base image

Puppeteer uses a headless chromium which has some dependencies we
can be provided by installing chrome, so do that.

The default seccomp policy prevents chrome sandbox for working.
There are numerous suggested ways to fix that, but I was having
problems making it work consistently, so I'll start with
"unconfined" and try to figure it out a stricter policy in a future
commit.

See also:
* https://github.com/puppeteer/puppeteer/blob/main/docs/troubleshooting.md#setting-up-chrome-linux-sandbox
* jessfraz/dockerfiles#65 (comment)
* https://github.com/moby/moby/blob/master/profiles/seccomp/default.json
* https://docs.docker.com/engine/security/seccomp/
* https://kubernetes.io/docs/tutorials/security/seccomp/

Gemfile

@@ -48,6 +48,9 @@ gem "aws-sdk-s3", require: false
 # For nice emails
 gem 'bootstrap-email'
 
+# For thumbnails and screenshots
+gem 'grover'
+
 # For payments
 gem 'pay', '~> 3.0'
 gem 'stripe', '>= 2.8', '< 6.0'

Gemfile.lock

@@ -99,6 +99,9 @@ GEM
       regexp_parser (>= 1.5, < 3.0)
       xpath (~> 3.2)
     childprocess (4.1.0)
+    combine_pdf (1.0.22)
+      matrix
+      ruby-rc4 (>= 0.1.5)
     concurrent-ruby (1.1.10)
     crass (1.0.6)
     css_parser (1.11.0)
@@ -118,6 +121,9 @@ GEM
     ffi (1.15.5)
     globalid (1.0.0)
       activesupport (>= 5.0)
+    grover (1.1.1)
+      combine_pdf (~> 1.0)
+      nokogiri (~> 1.0)
     haml (5.2.2)
       temple (>= 0.8.0)
       tilt
@@ -216,6 +222,7 @@ GEM
       actionpack (>= 5.0)
       railties (>= 5.0)
     rexml (3.2.5)
+    ruby-rc4 (0.1.5)
     ruby_parser (3.19.1)
       sexp_processor (~> 4.16)
     rubyzip (2.3.2)
@@ -288,6 +295,7 @@ DEPENDENCIES
   dalli
   devise
   devise-security
+  grover
   haml-rails
   jbuilder (~> 2.7)
   net-imap

package.json

@@ -9,6 +9,7 @@
     "bootstrap": "^5.1.3",
     "bootstrap-icons": "^1.0.0",
     "jquery": "^3.6.0",
+    "puppeteer": "^16.1.0",
     "webpack": "^4.46.0",
     "webpack-cli": "^3.3.12"
   },