Dockerize: one-command stack with auto Ollama model pull

`docker compose up -d --build` now brings up the whole thing automatically —
no host setup needed:

- All-in-one javis image: TigerVNC+XFCE desktop, Chrome, Python brain bridge,
  Node/bun bot, managed by supervisord (verified: all 6 programs RUNNING).
- ollama service + one-shot ollama-init that auto-pulls chat+embed models
  (verified end-to-end; `ollama list` shows pulled models).
- Discord token deferred: without DISCORD_BOT_TOKEN the desktop, bridge,
  Ollama and models all run; only the bot waits (no crash loop).
- Slim container deps (bridge/requirements-bridge.txt) drop the unused
  PyQt6/torch/chatterbox/sounddevice stack. Piper voice + Whisper models
  auto-download into named volumes.
- Configurable host ports (VNC_PORT/NOVNC_PORT/BRIDGE_PORT) to avoid clashing
  with a host VNC already on 5901. Bridge binds 0.0.0.0 in-container.

Verified: image builds; brain imports; bridge /health 200; noVNC 200;
X display :1 @1920x1080; auto-pull completes; supervisorctl status all RUNNING.

.env.example

@@ -27,11 +27,22 @@ WHISPER_COMPUTE_TYPE=auto
 TTS_PIPER_MODEL_PATH=
 
 # ---------------------------------------------------------------------------
-# Jarvis brain (Ollama-backed). See src/jarvis/config.py for the full list.
+# Jarvis brain (Ollama-backed). In Docker these populate the rendered
+# config (docker/jarvis-config.template.json). See src/jarvis/config.py.
 # ---------------------------------------------------------------------------
+# In docker-compose this is overridden to http://ollama:11434 automatically.
 OLLAMA_BASE_URL=http://127.0.0.1:11434
-# OLLAMA_CHAT_MODEL=...
-# WHISPER_MODEL=...
+OLLAMA_CHAT_MODEL=llama3.1:8b
+OLLAMA_EMBED_MODEL=nomic-embed-text
+WHISPER_MODEL=small
+
+# ---------------------------------------------------------------------------
+# Docker desktop (VNC) — used only by the container image
+# ---------------------------------------------------------------------------
+# VNC viewer password (max 8 chars effective). Watch the screen at localhost:5901.
+VNC_PASSWORD=javis123
+# Auto-opened page in the in-container Chrome.
+CHROME_START_URL=about:blank
 
 # ---------------------------------------------------------------------------
 # VNC screen broadcast