docs: remove Docker artifacts (keep S360 server image), add local-first Docker-for-Neo4j workflow

[colombod]

Summary

Removes maintained Docker artifacts from the repo — keeping only the S360-compliant server Dockerfile — and rewrites the documentation/setup around a local-first workflow that runs Neo4j in a documented Docker container. Also corrects and expands the Azure deployment guide.

Removed

• docker-compose.yml, docker-compose.airgap.yml (unused Compose stack)
• start.sh (Compose wrapper)
• neo4j.Dockerfile (Neo4j no longer shipped as a container image)
• test/airgap/ (README.md, dtu-profile.yaml, verify-airgap-apoc.sh)
• tests/test_docker_compose_simplified.py, tests/test_docker_infrastructure.py, tests/test_start_sh.py (now-subjectless tests)

Kept (intentionally)

The server Dockerfile (S360/Qualys-compliant Azure Linux base, PR #50), .dockerignore, docker-entrypoint.sh, and the tests/neo4j/ fixtures + the docker dev-dependency.

Added

• scripts/prime-local-config.py — stdlib-only local key-priming helper replacing the old Docker credential bootstrap: generates the API token (printed once, only the sha256 digest stored) and writes server-config.yaml with bolt://localhost:7687 + a local writable data tree.
• docs/local-development.md — canonical "Running Locally" guide: Neo4j via a single documented docker run (NEO4J_PLUGINS auto-installs APOC + GDS, --restart unless-stopped for boot persistence), key priming, run the server, plus ask-Amplifier prompts.

Changed

• README.md — removed the Docker Compose / single-container run sections and all references to deleted files; local-first is now the primary path.
• docs/azure-deployment.md — rewritten into a generic, compliant "deploy via amplifier-online" guide (no as-built specifics/secrets/IPs): S360 base-image policy (PR fix(docker): adopt Azure Linux base + remove EOL packaging tools to clear S360 SCA findings #50), a Neo4j VM build section (capacity, APOC+GDS, persistent disk, private VNet/NSG), Key Vault secret wiring with the declarative-redeploy rule, dual-client config keyed to the Neo4j Community single-account reality, and a Neo4j-safe version-bump runbook.
• docs/service-setup.md — local Neo4j guidance; removed the docker-compose Caddy HTTPS section.
• docs/managing-api-keys.md — local prime-local-config.py bootstrap.
• docs/remote-access-sharing.md — standalone/local host-binding + backup/restore.
• docs/designs/per-user-api-keys.md — bootstrap references off the deleted start.sh.
• AGENTS.md — keep/remove policy and the S360 base-image compliance anchor.
• amplifier-online.yaml — deployed image tag reference v6.0.0 → v6.6.6.

Validation

• pytest tests/ collects 1881 tests, no errors.
• scripts/prime-local-config.py passes ruff + pyright and was tested end-to-end.
• Repo-wide grep confirms zero broken references to any deleted file.

🤖 Generated with Amplifier