update installation

README.md

@@ -23,11 +23,36 @@ See [docs/deployment.md](docs/deployment.md) for the installation, Gitea setup,
 TLS bootstrap, repository move, renewal, backup, and update procedures. The
 ProxMenu integration contract is in [docs/client-api.md](docs/client-api.md).
 
+## Guided installation
+
+After cloning the repository, run:
+
+```sh
+./install.sh
+```
+
+The installer defaults to `SSL_MODE=none`, writes a mode-`0600` `.env`, creates
+the runtime directories and Docker network, and starts Gitea behind the
+HTTP-only Nginx test configuration. It does not invent Gitea OAuth or package
+credentials. After creating those resources in Gitea, run
+`./manage.sh configure-broker` and `./manage.sh start`.
+
+Once public DNS and TCP 80/443 forwarding are ready, switch the same persistent
+deployment to Let's Encrypt:
+
+```sh
+./manage.sh set-ssl letsencrypt
+./manage.sh bootstrap
+./manage.sh start
+```
+
 ## Local checks
 
 ```sh
 GOCACHE=/tmp/tapm-go-cache go test ./...
 docker compose --env-file .env.example config
+docker compose --env-file .env.example \
+  -f compose.yaml -f compose.http.yaml config
 docker compose --env-file .env.example \
   -f compose.yaml -f compose.tls.yaml -f compose.direct.yaml config
 docker build -t tai/tapm-deployment-broker:local .