Improve security and deployment flexibility for external access

Update README and application configurations to support reverse proxy setups, including TLS termination and proper cookie handling, and add an option to seed demo meetings.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 77cfe984-2c65-4152-bb7a-0df28274fe66
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Event-Id: c15da2be-cee7-4cbb-8d58-f9fcc3c38ed7
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/c3c252e4-c83d-40ca-9fff-99a3ea60701e/77cfe984-2c65-4152-bb7a-0df28274fe66/FvHcc7z
Replit-Helium-Checkpoint-Created: true

docker-compose.yml

@@ -32,6 +32,7 @@ services:
       # the first-run Setup Wizard (/api/setup/complete).
       SEED_ADMIN_PASSWORD: ${SEED_ADMIN_PASSWORD:-}
       SEED_USER_PASSWORD: ${SEED_USER_PASSWORD:-}
+      SEED_DEMO_MEETINGS: ${SEED_DEMO_MEETINGS:-false}
       PUBLIC_BASE_URL: ${PUBLIC_BASE_URL:-http://localhost:${APP_PORT:-3000}}
     user: root
     entrypoint: ["/usr/bin/tini", "--"]
@@ -62,6 +63,7 @@ services:
       DEFAULT_OBJECT_STORAGE_BUCKET_ID: ${DEFAULT_OBJECT_STORAGE_BUCKET_ID:-tx-local}
       ALLOWED_ORIGINS: ${ALLOWED_ORIGINS:-http://localhost:${APP_PORT:-3000}}
       PUBLIC_BASE_URL: ${PUBLIC_BASE_URL:-http://localhost:${APP_PORT:-3000}}
+      TRUST_PROXY_HTTPS: ${TRUST_PROXY_HTTPS:-false}
       LOG_LEVEL: ${LOG_LEVEL:-info}
       HTTPS_MODE: ${HTTPS_MODE:-local}
       LOCAL_DOMAIN: ${LOCAL_DOMAIN:-}