Simplify getting-started: end at step 3, move config to separate docs ...

Getting started now covers only bootstrap (download → set password → start).
Configuration (clusters, TLS, filter chains) is deferred to the tutorial
and envoy-config.md so the onboarding path stays linear.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Overhaul docs for auto-bootstrap, Local CA, and whoami tutorial ...

- Remove starter.json (no longer needed — gateway auto-bootstraps on first boot)
- Add envoy/envoy.yaml static bootstrap config
- Fix docker-compose.yml to use envoy.yaml instead of starter.json
- Update README: fix quick start flow, add Local CA section, add tutorial link
- Rewrite getting-started.md: auto-bootstrap, Local CA, bring-your-own-CA
- Update envoy-config.md: replace import section with auto-bootstrap explanation
- Add docs/tutorial-whoami-local-https.md: end-to-end local HTTPS with whoami
- Add configs/README.md: clarify configs dir purpose

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docs: add Cloudflare Tunnel exposure architecture guide and sequence diagrams

fix: correct Envoy bootstrap architecture, docker-compose configuration, and installation docs

Initial release — Aegis v1.0.0 ...

Self-hosted Envoy gateway with AI threat analysis, TLS automation,
and real-time security dashboard.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>