feat(install): per-host auto-generated secrets for Docker installs

Each fresh 1Panel/Docker install generates unique MYSQL and NEXUS keys
via scripts/generate_nexus_secrets.py; install wizard reuses compose env.

docker/README.md

@@ -64,5 +64,7 @@ docker compose -f docker/docker-compose.prod.yml --env-file docker/.env.prod up
 - 仅绑定 `127.0.0.1:8600`；OpenResty 反代见 `deploy/1panel/openresty-nexus.conf.example`
 - **2C8G 调优**：`docker/mysql-prod-2c8g.cnf`（buffer pool 1G、`max_connections=120`）+ 容器 `mem_limit` + `NEXUS_DB_POOL_SIZE=30`
 - 完整迁移步骤：`docs/design/plans/2026-06-04-1panel-docker-production.md`
+- 一键安装：`bash deploy/install-1panel-docker.sh`
+- 一键升级：`bash deploy/upgrade-1panel-docker.sh`（`--check` 仅查更新）
 
 详见 `docs/design/specs/2026-06-03-docker-design.md`。