Sezione dedicata alle porte con distinzione tra porte pubbliche (80,
443), interne Docker (3000, 5432, 1025) e solo sviluppo (8025).
Include comandi UFW pronti per Ubuntu/Debian.
- Add new section summarising the 4 differences between local dev and
production: domain/HTTPS, env vars, server requirements, backups
- Update production Caddyfile example to include /uploads/* static
file handler (required for image serving)