remove user-secrets approach & prepare a pilot deploy

telegram-otp-bot/Dockerfile

@@ -0,0 +1,20 @@
+# Balinyaar Telegram OTP relay — build context is `telegram-otp-bot/`.
+#
+# Zero dependencies (Node built-ins only), so there is no install step and no build stage: the image is
+# the base runtime plus four source files.
+
+FROM node:22-alpine
+WORKDIR /app
+
+COPY package.json ./
+COPY src ./src
+
+# The relay must accept connections from the API container, not just its own loopback. Everything else
+# (bot token, chat ids, API key, proxy URL) is supplied by compose — src/env.js lets real environment
+# variables win over any .env file, so nothing here depends on one existing.
+ENV HOST=0.0.0.0
+ENV PORT=5010
+
+USER node
+EXPOSE 5010
+CMD ["node", "src/server.js"]