Root docker-compose.yml: removed build directive so quickstart uses
pre-built image instead of triggering local Rust compilation.
deploy/docker-compose.yml: added Caddy reverse proxy service with
TLS termination, replaced ports with expose (no direct 4000 access),
added healthcheck and service dependency. Removed stale build context
that referenced parent directory.