🧑‍💻(dev) run Docs beside Drive on a shared identity provider

The POC needs both stacks up at once on one machine, so the default
ports (3000, 8071, 8083, 4444...) are remapped to a parallel scheme
(3001, 8072, 8084, 4445...) and both compose networks share the
lasuite-network bridge. Authentication is delegated to Drive's
Keycloak: users must have the same OIDC sub in both apps for the
impersonation headers to resolve, so a single realm serves the two of
them and the local Keycloak is no longer proxied. The Drive
server-to-server dev token is a placeholder, mirrored in the Drive
branch of the POC.

docker/files/etc/nginx/conf.d/default.conf

@@ -37,16 +37,7 @@ server {
         proxy_set_header X-Original-Method $request_method;
     }
 
-    location / {
-        proxy_pass http://keycloak:8080;
-        proxy_set_header Host $http_host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-
-        # Increase proxy buffer size to allow keycloak to send large
-        # header responses when a user is created.
-        proxy_buffer_size 128k;
-        proxy_buffers 4 256k;
-        proxy_busy_buffers_size 256k;
-    }
+    # Authentication is delegated to Drive's Keycloak (single shared
+    # instance, reachable on http://localhost:8083), so this server only
+    # handles media.
 }