docker: 前端 nginx HTTP :2000(外部反代接管域名/TLS,不再内置证书);README + logo

- docker-compose.yml:去 acme,web 端口 2000(WEB_PORT),CORS_ORIGINS/COOKIE_SECURE 直配,清理证书 volumes
- frontend nginx 模板/Dockerfile:纯 HTTP :2000,删自签证书 + cert-watch 入口脚本
- 删除 install.sh、.env.docker.example(compose 直接 up,不再需要一键脚本/模板)
- README(中英):部署改为 Docker(2000端口反代)+ 源码两法;去 acme/自动 HTTPS 表述;结构/徽章同步;顶部加 Vivid logo(favicon.svg);视频 720p/1080p 分辨率对照表(DocsView)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

frontend/Dockerfile

@@ -1,7 +1,7 @@
 # syntax=docker/dockerfile:1
 # Frontend is open-source: built from source inside the image, then served by
-# nginx which also reverse-proxies the API and terminates TLS (certs from the
-# acme.sh sidecar via a shared volume).
+# nginx (HTTP only on :2000) which also reverse-proxies the API. TLS + domain are
+# handled by the user's own reverse proxy in front of this container.
 # ---- build stage ----
 FROM node:22-alpine AS build
 WORKDIR /app
@@ -12,12 +12,7 @@ RUN npm run build
 
 # ---- serve stage ----
 FROM nginx:1.27-alpine
-# openssl: self-signed bootstrap cert. The nginx image substitutes ${DOMAIN} in
-# /etc/nginx/templates/*.template at startup (limited to DOMAIN via the filter).
-RUN apk add --no-cache openssl
 COPY --from=build /app/dist /usr/share/nginx/html
-COPY default.conf.template /etc/nginx/templates/default.conf.template
-COPY docker-entrypoint.d/10-selfsigned.sh /docker-entrypoint.d/10-selfsigned.sh
-COPY docker-entrypoint.d/30-cert-watch.sh /docker-entrypoint.d/30-cert-watch.sh
-RUN chmod +x /docker-entrypoint.d/10-selfsigned.sh /docker-entrypoint.d/30-cert-watch.sh
-EXPOSE 80 443
+# Plain config (no envsubst / no ${DOMAIN}) — copied straight into conf.d.
+COPY default.conf.template /etc/nginx/conf.d/default.conf
+EXPOSE 2000