docs: update Docker deployment guide and compose config

- Update docker-compose.yml: use hermes-agent internal hostname for UPSTREAM,
  expose ports 8642-8670, add server data volume mapping
- Rewrite docs/docker.md with pre-built image usage, env var table,
  data persistence (token location), port mapping, and common operations
- Update README.md and README_zh.md Docker section with pre-built image
  instructions and token location

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

README.md

@@ -162,25 +162,22 @@ hermes-web-ui start
 Run Web UI together with Hermes Agent:
 
 ```bash
+# Use pre-built image (Recommended)
+WEBUI_IMAGE=ekkoye8888/hermes-web-ui:latest docker compose up -d hermes-agent hermes-webui
+
+# Or build from source
 docker compose up -d --build hermes-agent hermes-webui
+
 docker compose logs -f hermes-webui
 ```
 
 Open **http://localhost:6060**
 
 - Persistent Hermes data is stored in `./hermes_data`
-- The web UI service is built from this repository's `Dockerfile`
+- Web UI auth token is stored in `./hermes_data/hermes-web-ui-data/.token`
+- On first run with auth enabled, the token is printed to container logs
 - All runtime settings are environment-variable driven in `docker-compose.yml`
 
-Override compose variables directly from command line (no `.env` file required):
-
-```bash
-PORT=16060 \
-UPSTREAM=http://127.0.0.1:8642 \
-HERMES_BIN=/opt/hermes/.venv/bin/hermes \
-docker compose up -d --build hermes-agent hermes-webui
-```
-
 For detailed notes and troubleshooting, see [`docs/docker.md`](./docs/docker.md).
 
 ### CLI Commands