feat: Add slcompose service orchestrator with Infisical secret injection

- Add slcompose.sh: Central orchestrator for managing all Docker services
  * Boot all services at startup with automated Infisical secret injection
  * Commands: up, down, restart, logs, logs-tail, env, env-all
  * Colored environment variable output (blue names, green values)

- Add slcompose.service: Systemd service file for auto-boot on startup
  * Type=oneshot with RemainAfterExit=yes
  * Waits for Docker service before starting
  * Runs on multi-user.target

- Add orchestration.md: Comprehensive documentation
  * Architecture and installation guide
  * Usage examples for all commands
  * Secret injection flow and troubleshooting
  * Performance and security notes

- Update README.md and AI_CONTEXT.md
  * Document service orchestration architecture
  * Explain slcompose functionality and commands
  * Reference new orchestration documentation

docs/secrets.md

@@ -2,21 +2,15 @@
 
 ## Overview
 
-SilverLinux uses a centralized secrets file for shared credentials and sensitive configuration.
+SilverLinux uses Infisical for centralized secret management. Secrets are injected into Compose stacks at runtime by `infisical run`.
 
-Location:
-
-```text
-/srv/secrets/company.env
-```
-
-This file is stored on the server and is never committed to Git.
+This repository no longer depends on a local `/srv/secrets/company.env` file for deployed services.
 
 ---
 
 ## Purpose
 
-The secrets file provides a single location for:
+The Infisical deployment flow provides a single source of truth for:
 
 * SMTP credentials
 * Database passwords
@@ -24,11 +18,12 @@ The secrets file provides a single location for:
 * OAuth client secrets
 * Future API keys
 
-Applications should load secrets using:
+Applications should load secrets using Infisical injection at deployment time.
 
-```yaml
-env_file:
-  - /srv/secrets/company.env
+Example:
+
+```bash
+infisical run --path=/ --recursive -- docker compose up -d
 ```
 
 ---