feat: distribution package v1.0 — OCIR-based deployment without source code

- distribution/: public release package (docker-compose + terraform VM + README v1.0)
- docker-compose.yml pulls pre-built images from OCIR (no build, no source code)
- terraform/: VM stack (ARM Free Tier, LB+WAF+SSL, conditional DNS/Let's Encrypt)
- Removed terraform-oke/ and k8s/ from git (private, .gitignore)

distribution/.env.example

@@ -0,0 +1,29 @@
+# ── REQUIRED ────────────────────────────────────────────────────────────────
+
+# OCIR region (e.g., us-ashburn-1, sa-saopaulo-1)
+OCIR_REGION=us-ashburn-1
+
+# OCIR namespace (find in OCI Console > Developer Services > Container Registry)
+OCIR_NAMESPACE=
+
+# Application secret — REQUIRED
+# Generate with: openssl rand -hex 64
+# This key encrypts JWT tokens, credentials, and session data.
+APP_SECRET=
+
+# ── OPTIONAL ────────────────────────────────────────────────────────────────
+
+# Image tag (default: latest)
+# IMAGE_TAG=latest
+
+# JWT token expiry in hours (default: 12)
+# JWT_EXPIRY_HOURS=12
+
+# Frontend port (default: 8080)
+# PORT=8080
+
+# CORS allowed origins (comma-separated)
+# CORS_ORIGINS=https://your-domain.com
+
+# Timezone (default: America/Sao_Paulo)
+# TZ=America/Sao_Paulo