Production improvements: listen to localhost by default, control mongodb authSource specifically, and die on connection errors.
Merge or use mongodb URL from env vars when starting catalog container