chore: add CHARON_ENCRYPTION_KEY to all Docker Compose files and README

- Add encryption key environment variable to docker-compose.yml,
  docker-compose.dev.yml, docker-compose.local.yml, docker-compose.test.yml
- Update README.md Quick Start examples (compose and docker run)
- Include generation instructions: openssl rand -base64 32

Required for DNS provider and plugin features which encrypt sensitive data at rest.

.docker/compose/docker-compose.dev.yml

@@ -15,6 +15,8 @@ services:
       - CPM_ENV=development
       - CHARON_HTTP_PORT=8080
       - CPM_HTTP_PORT=80
+      # Generate with: openssl rand -base64 32
+      - CHARON_ENCRYPTION_KEY=your-32-byte-base64-key-here
       - CHARON_DB_PATH=/app/data/charon.db
       - CHARON_FRONTEND_DIR=/app/frontend/dist
       - CHARON_CADDY_ADMIN_API=http://localhost:2019

.docker/compose/docker-compose.local.yml

@@ -13,6 +13,8 @@ services:
       - CHARON_ENV=development
       - CHARON_DEBUG=1
       - TZ=America/New_York
+      # Generate with: openssl rand -base64 32
+      - CHARON_ENCRYPTION_KEY=your-32-byte-base64-key-here
       - CHARON_HTTP_PORT=8080
       - CHARON_DB_PATH=/app/data/charon.db
       - CHARON_FRONTEND_DIR=/app/frontend/dist

.docker/compose/docker-compose.yml

@@ -11,6 +11,8 @@ services:
     environment:
       - CHARON_ENV=production # CHARON_ preferred; CPM_ values still supported
       - TZ=UTC # Set timezone (e.g., America/New_York)
+      # Generate with: openssl rand -base64 32
+      - CHARON_ENCRYPTION_KEY=your-32-byte-base64-key-here
       - CHARON_HTTP_PORT=8080
       - CHARON_DB_PATH=/app/data/charon.db
       - CHARON_FRONTEND_DIR=/app/frontend/dist