add initial Docker setup with .dockerignore, Dockerfile, docker-compose.yml, and deployment script

.env.example

@@ -0,0 +1,19 @@
+# BizGaze Support — server secrets / config.
+# Copy this file to `.env` next to docker-compose.yml on the server and fill in
+# real values. The real `.env` is gitignored — NEVER commit credentials.
+# Compose injects these into the container via `env_file:`.
+
+# Managed TURN relay (Metered) — makes WebRTC work on mobile/cellular & strict NATs.
+# Comma-separated URL list; username + credential from the Metered dashboard.
+TURN_URLS=turn:global.relay.metered.ca:80,turn:global.relay.metered.ca:80?transport=tcp,turn:global.relay.metered.ca:443,turns:global.relay.metered.ca:443?transport=tcp
+TURN_USERNAME=
+TURN_CREDENTIAL=
+
+# Optional: open self-registration of the first/any team (1 to enable).
+# ALLOW_REGISTRATION=1
+
+# Optional: shared secret for BizGaze SSO + signed webhook delivery.
+# SSO_SECRET=
+
+# Optional: BizGaze webhook endpoint for session events.
+# BIZGAZE_WEBHOOK_URL=