docs: publish architecture and experiment portal

docs/operations.md

@@ -3,6 +3,7 @@
 ## Production layout
 
 - Public URL: `https://agent.k1412.top`
+- Public documentation: `https://agent.k1412.top/doc/`
 - NAS project: `/boot/config/plugins/compose.manager/projects/k1412-agent`
 - Public host port: `12004`
 - Execution provider: `ssh-docker`
@@ -47,6 +48,11 @@ Compose file, image, repository, or log.
 The SSH override removes `/var/run/docker.sock` from Gateway and mounts the
 dedicated SSH directory read-only at `/root/.ssh`.
 
+The documentation portal is copied into the existing Web image at
+`/app/build/doc`. It uses the same host port and proxy route as Open WebUI, so
+it does not require another Compose project, NAS port, DNS record, or Nginx
+Proxy Manager host.
+
 The Workspace image keeps the user home, package caches, and Python user base
 under `/workspace/.agent`; the conventional project virtual environment is
 `/workspace/.venv`. Updating `WORKSPACE_IMAGE` to a new immutable tag causes