chore: add STIRLING_PDF_URL, STIRLING_PDF_API_KEY, PORTAL_ONLY_USERS to docker-compose

These env vars were previously hardcoded in source code and removed during
the production audit. Now properly configured in docker-compose.yml.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker-compose.yml

@@ -51,6 +51,9 @@ services:
       - ANCPI_LOGIN_URL=https://oassl.ancpi.ro/openam/UI/Login
       - ANCPI_DEFAULT_SOLICITANT_ID=14452
       - MINIO_BUCKET_ANCPI=ancpi-documente
+      # Stirling PDF (local PDF tools)
+      - STIRLING_PDF_URL=http://10.10.10.166:8087
+      - STIRLING_PDF_API_KEY=cd829f62-6eef-43eb-a64d-c91af727b53a
       # iLovePDF cloud compression (free: 250 files/month)
       - ILOVEPDF_PUBLIC_KEY=${ILOVEPDF_PUBLIC_KEY:-}
       # Martin vector tile server (geoportal)
@@ -65,6 +68,8 @@ services:
       - NOTIFICATION_FROM_EMAIL=noreply@beletage.ro
       - NOTIFICATION_FROM_NAME=Alerte Termene
       - NOTIFICATION_CRON_SECRET=1547a198feca43af6c05622588c6d3b820bad5163b8c20175b2b5bbf8fc1a987
+      # Portal-only users (comma-separated, redirected to /portal)
+      - PORTAL_ONLY_USERS=dtiurbe,d.tiurbe
       # Address Book API (inter-service auth for external tools)
       - ADDRESSBOOK_API_KEY=abook-7f3e9a2b4c1d8e5f6a0b3c7d9e2f4a1b5c8d0e3f6a9b2c5d8e1f4a7b0c3d6e
     depends_on: