feat(deploy): add containerized deployment configuration and scripts

- Add Dockerfile for frontend and server services
- Add Docker Compose configs (standard and offline mode)
- Add nginx.conf for admin-web service
- Add deploy scripts: package.sh (packaging) and load-and-start.sh (startup)
- Add deploy/config.yaml, .env.example, and prompts.yml configurations
- Add image management design specification doc

deploy/.env.example

@@ -0,0 +1,30 @@
+# ─── geo-rankly deployment configuration ──────────────────────────────────────
+# Copy this file to .env and fill in the required values.
+# Do NOT commit .env to version control.
+
+# ─── Image registry (for pulling pre-built images) ───────────────────────────
+# Change to your registry prefix, e.g. ghcr.io/your-org/geo-rankly
+IMAGE_REGISTRY=ghcr.io/your-org/geo-rankly
+IMAGE_TAG=latest
+
+# ─── Required: API Keys ────────────────────────────────────────────────────────
+# LLM provider API key (Ark / Doubao / OpenAI-compatible)
+LLM_API_KEY=your-llm-api-key-here
+
+# Embedding + reranker API key (SiliconFlow)
+SILICONFLOW_API_KEY=your-siliconflow-api-key-here
+
+# ─── Required: Security ───────────────────────────────────────────────────────
+# JWT signing secret — use a strong random string in production
+# Generate: openssl rand -hex 32
+JWT_SECRET=change-me-in-production
+
+# ─── Optional: MinIO credentials ─────────────────────────────────────────────
+MINIO_ROOT_USER=minioadmin
+MINIO_ROOT_PASSWORD=minioadmin
+
+# ─── Optional: Exposed ports ─────────────────────────────────────────────────
+FRONTEND_PORT=80
+API_PORT=8080
+RABBITMQ_MGMT_PORT=15672
+MINIO_CONSOLE_PORT=9001