Document env vars and remove theme collapse button

- Expand .env.example with full runtime, cache, Docker, and AI keys
- Add deployment secrets to .gitignore (docker-compose/.env,
  docker/.registry.env)
- Remove VIMEO_ACCESS_TOKEN from compose files; add OAuth redirect URIs
- Load registry credentials from .registry.env in deploy-img.sh
- Fail fast if protected registry lacks auth during pre-checks
- Pass DOCKER_USERNAME/PASSWORD explicitly to WSL in deploy-img.ps1
- Remove inline collapse buttons from themes-nav.component.html

docker-compose/docker-compose.yml

@@ -16,7 +16,6 @@ services:
       - GEMINI_API_KEY=${GEMINI_API_KEY}
       - YOUTUBE_API_KEY=${YOUTUBE_API_KEY}
       - YOUTUBE_API_KEYS=${YOUTUBE_API_KEYS}
-      - VIMEO_ACCESS_TOKEN=${VIMEO_ACCESS_TOKEN}
       - TWITCH_CLIENT_ID=${TWITCH_CLIENT_ID}
       - TWITCH_CLIENT_SECRET=${TWITCH_CLIENT_SECRET}
       - DOWNLOAD_PROVIDERS=${DOWNLOAD_PROVIDERS:-youtube,dailymotion,twitch,peertube,odysee,rumble}
@@ -32,6 +31,11 @@ services:
       - YT_COOKIES_FILE=${YT_COOKIES_FILE:-}
       - YT_PO_TOKEN=${YT_PO_TOKEN:-}
       - YT_EGRESS_PROXY=${YT_EGRESS_PROXY:-}
+      - TWITCH_REDIRECT_URI=${TWITCH_REDIRECT_URI}
+      - GOOGLE_CLIENT_ID=${GOOGLE_CLIENT_ID}
+      - GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET}
+      - GOOGLE_REDIRECT_URI=${GOOGLE_REDIRECT_URI}
+      - OAUTH_APP_BASE_URL=${OAUTH_APP_BASE_URL}
       - TZ=${TZ}
     volumes:
       - ${DIR_NEWTUBE}/assets:/app/assets