refactor: image-only distribution, remove compose/env/registry files

distribution/README.md

@@ -11,7 +11,7 @@
 <p align="center">
   <img src="https://img.shields.io/badge/version-1.0-C74634?style=flat-square" alt="Version">
   <img src="https://img.shields.io/badge/OCI-GenAI-C74634?style=flat-square" alt="OCI">
-  <img src="https://img.shields.io/badge/docker-compose-2496ED?style=flat-square" alt="Docker">
+  <img src="https://img.shields.io/badge/docker-2496ED?style=flat-square" alt="Docker">
   <img src="https://img.shields.io/badge/terraform-7B42BC?style=flat-square" alt="Terraform">
   <img src="https://img.shields.io/badge/license-MIT-green?style=flat-square" alt="License">
 </p>
@@ -106,7 +106,7 @@ Multi-architecture: `linux/amd64` + `linux/arm64`
 
 ---
 
-### Option 1 — Local Docker (any machine)
+### Option 1 — Docker (any machine)
 
 Run on any machine with Docker installed (Linux, macOS, Windows).
 
@@ -114,27 +114,18 @@ Run on any machine with Docker installed (Linux, macOS, Windows).
 # 1. Login to OCIR
 docker login us-ashburn-1.ocir.io
 
-# 2. Configure
-cp .env.example .env
-# Edit .env: set APP_SECRET (openssl rand -hex 64)
-
-# 3. Run
-docker compose up -d
-
-# 4. Access: http://localhost:8080
-docker logs oci-cis-agent | grep "password"
-```
-
-Or with `docker run` (no compose file needed):
-
-```bash
+# 2. Run
 docker run -d \
   --name oci-cis-agent \
   -p 8080:8080 \
   -v agent-data:/data \
   -e APP_SECRET=$(openssl rand -hex 64) \
   -e TZ=America/Sao_Paulo \
+  --restart unless-stopped \
   us-ashburn-1.ocir.io/idi1o0a010nx/oci-cis-agent:latest
+
+# 3. Access: http://localhost:8080
+docker logs oci-cis-agent | grep "password"
 ```
 
 ---
@@ -384,7 +375,7 @@ Allow group <group-name> to read buckets in compartment <compartment-name>
 Verify your `docker login` credentials and that the OCIR repositories exist in your namespace.
 
 **Backend health check fails:**
-Check logs: `docker compose logs backend`. Ensure `APP_SECRET` is set in `.env`.
+Check logs: `docker logs oci-cis-agent`. Ensure `APP_SECRET` is set.
 
 **ADB connection fails (`DPY-6005`):**
 Ensure the wallet ZIP contains `tnsnames.ora` and `ewallet.pem`. The DSN must match a service name in `tnsnames.ora`.