refactor: remove deploy.cmd and update Dockerfile for health checks

- Deleted the deploy.cmd script as it was no longer needed.
- Updated Dockerfile to include curl for health checks and added a non-root user for improved security.
- Modified health check command to use curl for better reliability.
- Adjusted docker-compose.test.yml to reflect changes in health check configuration.
- Cleaned up appsettings.json and removed unused configuration properties.
- Removed Resource entity and related requests from the codebase as part of the architectural shift.
- Updated documentation to reflect the removal of hardware binding and related endpoints.

Co-authored-by: Cursor <cursoragent@cursor.com>

secrets/staging.public.env

@@ -0,0 +1,23 @@
+# Plain-text overlay for staging — committed; safe to read.
+# Loaded BEFORE the sops-decrypted overlay; secret values stay encrypted.
+
+ASPNETCORE_ENVIRONMENT=Staging
+ASPNETCORE_URLS=http://+:8080
+
+# Idempotent appsettings overrides — these match production for parity.
+ASPNETCORE_JwtConfig__Issuer=AzaionApi
+ASPNETCORE_JwtConfig__Audience=Annotators/OrangePi/Admins
+ASPNETCORE_JwtConfig__TokenLifetimeHours=4
+ASPNETCORE_ResourcesConfig__ResourcesFolder=Content
+ASPNETCORE_ResourcesConfig__SuiteInstallerFolder=suite
+ASPNETCORE_ResourcesConfig__SuiteStageInstallerFolder=suite-stage
+
+# Deploy-host plumbing.
+DEPLOY_CONTAINER_NAME=azaion.api
+DEPLOY_HOST_PORT=4000
+DEPLOY_HOST_CONTENT_DIR=/root/api/content
+DEPLOY_HOST_LOGS_DIR=/root/api/logs
+
+# Registry. REGISTRY_USER / REGISTRY_TOKEN come from the encrypted overlay.
+REGISTRY_HOST=docker.azaion.com
+REGISTRY_IMAGE=azaion/admin