Refresh docs and fix Docker builds for current layout

READMEs: correct the auth model (PocketBase token relay, not JWT/sessions),
document the full feature set (technical checks, fuel, maintenance, documents,
reminders, attachments, integrations, OCPP charging control), the shipping
built-in connectors (toyota, anker-solix), and the current endpoint surface.

Docker: build against the current repo layout — Go 1.26, cmd/server entry
point, Web App source under web/. Add the missing Web App Dockerfile (Go BFF)
and .dockerignore, drop the obsolete AUTH_SECRET, modernise CORS var naming,
and standardise on drivervault-* naming.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Docker AIO/docker-compose.yml

@@ -1,11 +1,11 @@
-name: carcontrol-aio
+name: drivervault-aio
 
 # Single all-in-one container: PocketBase + API Server + Web App (nginx).
 # The build context is the project root so the Dockerfile can reach both
 # "API Server/" and "Web App/". Copy .env.example to .env before starting.
 
 services:
-  carcontrol:
+  drivervault:
     build:
       # Project root (one level up from this compose file).
       context: ..
@@ -15,15 +15,13 @@ services:
         VITE_API_BASE: "${VITE_API_BASE:-}"
         # Optional: pin PocketBase; empty fetches the latest release at build.
         PB_VERSION: "${PB_VERSION:-}"
-    image: carcontrol-aio
-    container_name: carcontrol-aio
+    image: drivervault-aio
+    container_name: drivervault-aio
     restart: unless-stopped
     environment:
       # Superuser (also used by the API Server to authenticate to PocketBase).
       PB_ADMIN_EMAIL: "${PB_ADMIN_EMAIL:?set PB_ADMIN_EMAIL in .env}"
       PB_ADMIN_PASSWORD: "${PB_ADMIN_PASSWORD:?set PB_ADMIN_PASSWORD in .env}"
-      # Signs auth tokens — set to a long random value.
-      AUTH_SECRET: "${AUTH_SECRET:?set AUTH_SECRET in .env}"
     ports:
       - "${WEB_PORT:-80}:80"      # Web App
       - "${PB_PORT:-8090}:8090"   # PocketBase admin UI / API