Add dev/prod environments with TrueNAS Docker production deploy.

Split PostgreSQL into gallery_dev and gallery_prod, add Docker/Gitea deploy tooling,
SMB image sync, pgAdmin split script, dev:web on Keenetic :5173, and operator docs.

Co-authored-by: Cursor <cursoragent@cursor.com>

Documentation/API.md

@@ -1,16 +1,29 @@
 # Art Gallery — REST API
 
-Base URL:
+Base URL (paths are the same on every host; only the origin changes):
 
-- **Production (public):** `http://gallery.mysuperlab.netcraze.pro`
-- **Production (LAN):** `http://192.168.10.70:3520`
-- **Development (direct):** `http://localhost:3520` or `http://localhost:3001` depending on `PORT` in `.env`
-- **Development (Vite proxy):** `http://localhost:5173` (same paths)
+| Context | Base URL |
+|---------|----------|
+| **Production (public)** | `https://gallery.mysuperlab.netcraze.pro` |
+| **Production (LAN)** | `http://192.168.10.122:5173` |
+| **Development (public)** | `https://devgallery.mysuperlab.netcraze.pro` |
+| **Development (LAN)** | `http://192.168.10.70:5173` |
+| **Local Vite proxy** | `http://localhost:5173` (proxies `/api` and `/images` to API on `:3451`) |
+| **Local API only** | `http://localhost:3451` (when using `npm run dev:web`) |
+
+See [environments.md](environments.md) for Keenetic rules, databases, and deploy.
 
 All JSON responses use `Content-Type: application/json`. Errors return `{ "error": "message" }` with an appropriate HTTP status.
 
 Static images are served at `/images/<relative-path>` from `IMAGE_DIR`.
 
+**Quick check:**
+
+```powershell
+curl.exe -sk https://gallery.mysuperlab.netcraze.pro/api/bounds
+curl.exe -sk https://devgallery.mysuperlab.netcraze.pro/api/bounds
+```
+
 ---
 
 ## `GET /api/bounds`