Add dedicated docker-publish.yml with full CI/CD pipeline:
- Build & push server/agent/web/mcp images on tag, main push, and PR
- Publish to both Docker Hub and GHCR
- Semver tag strategy (latest, version, major.minor, major, sha)
- GHA build cache, SLSA provenance, and SBOM
- PR builds validate without pushing
Remove superseded dockerhub job from release.yml.
- README: emphasize Docker requirement with get-started link, move silent
install under one-click and de-emphasize
- DEPLOYMENT: clarify default config path and that only config file is mounted
- Move CONTRIBUTING.md to .github/CONTRIBUTING.md (git mv)
BBQ