fix deploy: use compose up instead of down+up, fetch secrets individually

- docker compose up -d --remove-orphans instead of down then up
- configure.sh delegates all service deployment to deploy.sh
- deploy.sh generates .env from bws before starting services
- remove 2>/dev/null from bws calls so errors are visible

tools/remove-app.sh

@@ -55,7 +55,7 @@ export BWS_ACCESS_TOKEN
 # --- Fetch secrets from Bitwarden Secrets Manager ---
 
 echo "==> Fetching secrets from Bitwarden Secrets Manager..."
-GITEA_TOKEN=$(bws secret list 2>/dev/null | jq -r '.[] | select(.key == "hantim-new-app-script") | .value')
+GITEA_TOKEN=$(bws secret list | jq -r '.[] | select(.key == "hantim-new-app-script") | .value')
 if [ -z "$GITEA_TOKEN" ]; then
     echo "ERROR: Secret 'hantim-new-app-script' not found in Bitwarden Secrets Manager."
     exit 1