add public icon route + forwarded proxy trust; SPEC/AGENTS docs

docker-compose.yml

@@ -1,8 +1,11 @@
 services:
   idrs-api:
     image: git.proit.id/proitlab/idrs-api:latest
-    env_file:
-      - .env
+    environment:
+      ADMIN_USERNAME: admin
+      ADMIN_PASSWORD: Pro4dm1n
+      IDRS_PUBLIC_URL: https://idrs.databisnis.id
+      FORWARDED_ALLOW_IPS: "*"
     volumes:
       - /mnt/nfs/server5.saltis.id/data/idrs/data:/app/data
       - /mnt/nfs/server5.saltis.id/data/idrs/static:/app/app/static
@@ -20,6 +23,7 @@ services:
         - traefik.http.routers.idrs-api.entrypoints=websecure
         - traefik.http.routers.idrs-api.tls.certresolver=letsencrypt
         - traefik.http.services.idrs-api.loadbalancer.server.port=8000
+        - id.proit.routing=mvnet
 
 networks:
   traefik-net: