feat(FN-006): add production deployment configuration

- Create docker-compose.prod.yml with Traefik, API, web, and DB services
- Add Portainer stack deployment files
- Configure Let's Encrypt TLS and health checks
- Add deployment environment variable examples
- Update portainer.env.example with additional config vars

deploy/portainer.env.example

@@ -1,27 +1,26 @@
-# Portainer stack environment variables (no secrets committed)
-# Copy and configure in Portainer UI or your secrets manager.
-
 APP_NAME=Headquarter
 ROOT_DOMAIN=example.com
 TOOL_DOMAIN=tools.example.com
 API_URL=https://api.example.com
 WEB_URL=https://example.com
 
-# Database
 POSTGRES_USER=headquarter
 POSTGRES_DB=headquarter
 POSTGRES_PASSWORD=
 
-# Authentik OIDC
 AUTHENTIK_ISSUER_URL=https://auth.example.com/application/o/headquarter/
 AUTHENTIK_CLIENT_ID=
 AUTHENTIK_CLIENT_SECRET=
 
-# Traefik
 TRAEFIK_NETWORK=traefik
 TRAEFIK_ENTRYPOINT=websecure
 TRAEFIK_CERT_RESOLVER=letsencrypt
 TOOL_SUBDOMAIN_PATTERN={tool}-{project}-{user}.tools.{ROOT_DOMAIN}
 
-# Secrets
 SECRET_ENCRYPTION_KEY=
+
+ACME_EMAIL=admin@example.com
+API_TAG=latest
+WEB_TAG=latest
+REGISTRY=ghcr.io
+REPO=headquarter