Document clearnet, TLS, and Tor setup; enable Nest CORS only in development and skip CORS_ORIGINS validation in production.
Document env copy, no-cache compose build, and local npm install for editors.