docs: publish English public documentation

docs/installazione-docker-4-contesti.md

@@ -1,6 +1,6 @@
-# Installazione Docker nei contesti operativi correnti
+# Docker installation in the current operating contexts
 
-ThothII usa una topologia Compose unica:
+ThothII uses one Compose topology:
 
 - `frontend`
 - `core`
@@ -8,17 +8,32 @@ ThothII usa una topologia Compose unica:
 - `embedding`
 - `embedding-model-init`
 
-Qdrant e Ollama embedding sono servizi interni obbligatori del progetto Compose. Restano esterni solo DWH e LLM. Il modello fissato è `qwen3-embedding:0.6b` con 1024 dimensioni e distanza
-coseno; `embedding-model-init` lo prepara prima dell'avvio di `core`.
+Qdrant and Ollama embedding are required internal Compose services. Only DWH and the LLM remain
+external. The fixed model is `qwen3-embedding:0.6b` with 1024 dimensions and cosine distance;
+`embedding-model-init` prepares it before `core` starts.
 
-## Contratto sintetico di ownership
+```mermaid
+flowchart TB
+    INSTALL["Installation descriptor"] --> CONTEXT{Context}
+    CONTEXT --> LOCAL["Local\nCompose local"]
+    CONTEXT --> SERVER["Server\nCompose server"]
+    CONTEXT --> SESSION["Session server\noperator services"]
+    CONTEXT --> AUTH["Auth runtime\nprojection services"]
+    LOCAL --> BUNDLE["Common secret bundle"]
+    SERVER --> BUNDLE
+    SESSION --> BUNDLE
+    AUTH --> BUNDLE
+    BUNDLE --> SERVICES["Frontend, core, vector, embedding"]
+```
+
+## Short ownership contract
 
 | Componente | Ownership | Contratto operativo |
 | --- | --- | --- |
-| DWH | Esterno | Endpoint esterno configurato dall'installazione. |
-| LLM | Esterno | Endpoint o policy esterna all'infrastruttura semantica interna. |
-| Qdrant | Interno | Servizio Compose interno obbligatorio con volume persistente `qdrant-data`. |
-| Ollama embedding | Interno | Servizio Compose interno obbligatorio per `qwen3-embedding:0.6b`. |
+| DWH | External | External endpoint configured by the installation. |
+| LLM | External | Endpoint or policy outside the internal semantic infrastructure. |
+| Qdrant | Internal | Required internal Compose service with persistent `qdrant-data` volume. |
+| Ollama embedding | Internal | Required internal Compose service for `qwen3-embedding:0.6b`. |
 
 ## Comando standard locale
 
@@ -31,49 +46,44 @@ docker compose --env-file deploy/env/local.env \
   -f compose.yaml -f deploy/compose.local.yaml up --build -d
 ```
 
-Compilare `deploy/env/local.env` con:
+Set these values in `deploy/env/local.env`:
 
 - `PI_AUTH_FILE`
 - `THT_SECRETS_FILE`
 - `THT_WORKSPACE_GIT_REMOTE`
-- endpoint DWH
-- endpoint LLM
+- DWH endpoint
+- LLM endpoint
 
-Non inserire secret nel file `.env`. I secret runtime stanno nel bundle
-`deploy/secrets/thothii.secrets`.
+Do not put secrets in `.env`. Runtime secrets belong in the
+`deploy/secrets/thothii.secrets` bundle.
 
-## Bundle dei secret
+## Secret bundle
 
-Le chiavi documentate e supportate nel bundle sono:
+The documented and supported bundle keys are:
 
 ```dotenv
 THT_MODEL_API_KEY=...
 THT_DWH_API_KEY=...
 ```
 
-Una CA privata PEM resta esterna al bundle e va montata con un override Compose revisionato.
+A private PEM CA remains outside the bundle and must be mounted through a reviewed Compose override.
 
 ## Preprocessing
 
-I job di preprocessing usano gli stessi servizi interni Qdrant/Ollama:
+Preprocessing runs through the native host CLI and the installation descriptor:
 
 ```sh
-docker compose --env-file deploy/env/local.env \
-  -f compose.yaml -f deploy/compose.local.yaml \
-  -f deploy/compose.preprocess.yaml --profile preprocess run --rm preprocess-evidence
+tht --installation /percorso/assoluto/thothii-installation.yaml workspace preprocess evidence
+tht --installation /percorso/assoluto/thothii-installation.yaml workspace preprocess dwh
 ```
 
-Per introspezione DWH:
-
-```sh
-docker compose --env-file deploy/env/local.env \
-  -f compose.yaml -f deploy/compose.local.yaml \
-  -f deploy/compose.preprocess.yaml --profile preprocess run --rm preprocess-dwh
-```
+The CLI runs the profile-gated `workspace-maintenance` service. See the
+[preprocessing contract](contracts/workspace-preprocessing-cli.md) and the
+[Evidence guide](evidence.md) for details.
 
 ## Server
 
-Per installazioni server usare il profilo server con overlay sessioni:
+For server installations, use the server profile with the session overlay:
 
 ```sh
 docker compose --env-file deploy/env/server.env \
@@ -81,7 +91,7 @@ docker compose --env-file deploy/env/server.env \
   -f deploy/compose.session-server.yaml.example up --build -d
 ```
 
-Consultare anche:
+Also see:
 
 - `docs/install/local-workspace-registry.md`
 - `docs/install/server-workspace-registry.md`