docs: update Docker deployment guide and compose config

- Update docker-compose.yml: use hermes-agent internal hostname for UPSTREAM,
  expose ports 8642-8670, add server data volume mapping
- Rewrite docs/docker.md with pre-built image usage, env var table,
  data persistence (token location), port mapping, and common operations
- Update README.md and README_zh.md Docker section with pre-built image
  instructions and token location

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -10,6 +10,8 @@ services:
     stdin_open: true
     tty: true
     restart: unless-stopped
+    ports:
+      - "8642-8670:8642-8670"
 
   hermes-webui:
     build:
@@ -30,10 +32,10 @@ services:
       - hermes-agent-src:/opt/hermes
     environment:
       - PORT=${PORT:-6060}
-      - UPSTREAM=${UPSTREAM:-http://127.0.0.1:8642}
+      - UPSTREAM=${UPSTREAM:-http://hermes-agent:8642}
       - HERMES_HOME=/home/agent/.hermes
       - HERMES_BIN=${HERMES_BIN:-/opt/hermes/.venv/bin/hermes}
-      - AUTH_DISABLED=${AUTH_DISABLED:-true}
+      - AUTH_DISABLED=${AUTH_DISABLED:-false}
     restart: unless-stopped
 
 volumes: