v0.4.1 — the quickstart runs the released image

• docker compose up never builds over the released image (#171). docker-compose.yml declared both the image .env names and a build from the checkout, so docker compose up -d on the quickstart's path pulled the released image, then built the checkout over it, tagged the local build with the release’s name, and ran that: a control plane reporting v0.4.0+<commit>.dirty, unverified, under the name of a signed image. The compose file is now image-only: it runs the image INNERWALL_IMAGE names, as pulled, and without the variable every docker compose command stops with an error naming the .env line to add. The build moves to docker-compose.dev.yml, which only make dev adds; its build is named innerwall:dev, never a release's name. make dev passes on a docker-compose.override.yml when one is present, as compose did on its own before. The quickstart's commands are unchanged apart from the version they name. Nothing in either binary changes.