Update site for .env keys and pd1 connection invites.

Quick start, operator, security, FAQ, download, home, and learn pages now
point operators at /opt/peardock/.env for public key and seed, and document
viewer / admin / pd1. invite roles.

docs/architecture.html

@@ -221,8 +221,9 @@ sequenceDiagram
       <h2>Security surfaces</h2>
       <ul>
         <li>Noise transport (HyperDHT)</li>
-        <li>Roles: viewer / operator / admin + method ACL</li>
-        <li>Optional peer allowlist + invites</li>
+        <li>Roles: viewer (default) / operator / admin + method ACL</li>
+        <li>Elevate via <code>SERVER_SEED</code> proof or self-contained <code>pd1.</code> invites</li>
+        <li>Optional peer allowlist + revoke</li>
         <li>Rate limits per peer</li>
         <li>Audit log for privileged methods</li>
         <li>Registry vault AES-GCM (keyed from seed)</li>