fix: CORS configuration for both docker-compose and start_server.sh deployments

- Update start_server.sh to auto-detect local IP and export ALLOWED_ORIGINS
- Includes both localhost and detected IP on HTTP/HTTPS proxy ports
- Export JWT_SECRET_KEY with ephemeral key if not set
- Fix Romanian comments in docker-compose.yml to English
- Document two deployment methods in SESSION_STATE.md

docker-compose.yml

@@ -15,9 +15,9 @@ services:
     environment:
       - DATA_DIR=/app/data
       - LOGS_DIR=/app/logs
-      # [M-01] CORS allowed origins — personalizează pentru producție
+      # [M-01] CORS allowed origins — customize for production
       - ALLOWED_ORIGINS=http://localhost:3000,http://localhost:3002
-      # [C-01] JWT secret key — GENEREAZĂ O VALOARE SIGURĂ PENTRU PRODUCȚIE!
+      # [C-01] JWT secret key — GENERATE A SECURE VALUE FOR PRODUCTION!
       - JWT_SECRET_KEY=${JWT_SECRET_KEY:-change-me-in-production}
     restart: unless-stopped