docs: sync oauth-traefik-integration specs to main specs

- Update auth-oauth spec: configurable endpoints via environment variables
- Update docker-infrastructure spec: add traefik deployment mode
- Add traefik-deployment spec: new capability for reverse proxy deployment

openspec/specs/docker-infrastructure/spec.md

@@ -8,17 +8,16 @@ Provide a complete Docker-based development environment with all required servic
 
 ### Requirement: Docker Compose Setup
 
-The system SHALL provide a `docker-compose.yml` with all platform services.
+The system SHALL provide Docker Compose configurations for both development and traefik deployment.
 
-#### Scenario: Service definitions
+#### Scenario: Development compose file
 - GIVEN the development environment
-- THEN `docker-compose.yml` SHALL define:
-  - PostgreSQL database with health checks
-  - Redis cache with health checks
-  - Traefik reverse proxy with dashboard
-  - Authentik authentication server
-  - API service (FastAPI)
-  - Web frontend (React/Vite)
+- THEN `docker-compose.yml` SHALL define all platform services for local development
+
+#### Scenario: Traefik compose file
+- GIVEN the production deployment
+- THEN `docker-compose.traefik.yml` SHALL define all platform services behind Traefik
+- AND no ports SHALL be exposed directly (all traffic through Traefik)
 
 ### Requirement: Multi-Stage API Dockerfile
 
@@ -50,17 +49,19 @@ The system SHALL build the web frontend for production deployment.
 
 ### Requirement: Environment Configuration
 
-The system SHALL document all required environment variables.
+The system SHALL document all required environment variables for both development and traefik deployment modes.
 
 #### Scenario: Environment setup
-- GIVEN a new developer
+- GIVEN a new developer or operator
 - WHEN they set up the project
-- THEN `.env.example` SHALL document:
+- THEN `.env.example` SHALL document all variables for both modes
+- AND variables SHALL include:
   - Database connection strings
   - Redis connection strings
   - Authentik configuration
   - JWT secrets
   - Docker volume paths
+  - Domain configuration for traefik mode
   - External service URLs
 
 ### Requirement: Service Health Checks