update docs, fix deploy to not restart unchanged services

- deploy.sh: use compose up instead of down+up, fetch secrets individually
- configure.sh: delegate all service deployment to deploy.sh
- docs: add garage cluster init, .env.keys mechanism, update configure.sh description
- remove 2>/dev/null from bws calls

USECASES.md

@@ -18,8 +18,8 @@ bash /opt/hantim/scripts/bootstrap.sh
 - Creates deploy user with restricted SSH + sudo
 - Runs `configure.sh`:
   - Opens firewall ports (HTTP, HTTPS, Garage RPC)
-  - Issues SSL certs for all domains in `docker/nginx/conf.d/`
-  - Starts nginx and all app containers
+  - Sets up certbot renewal
+  - Deploys all services via `deploy.sh` (generates `.env` files, issues certs, starts containers)
 
 **Prerequisites:**
 - DNS for all configured domains must point to the server