feat: VPS deploy script + Tor hidden service config

deploy.sh: one-command VPS setup (Docker install, firewall, build)
docker-compose.tor.yml: Tor overlay with persistent onion keys
torrc: maps port 80 onion -> botfights:9100

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.tor.yml

@@ -0,0 +1,30 @@
+# Tor hidden service overlay for BOTFIGHTS
+# Usage: docker compose -f docker-compose.yml -f docker-compose.tor.yml up -d
+#
+# After first start, get your .onion address:
+#   docker compose exec tor cat /var/lib/tor/botfights/hostname
+
+services:
+  botfights:
+    # Remove public port exposure when using Tor-only mode
+    # ports: []
+    networks:
+      - tornet
+
+  tor:
+    image: osminogin/tor-simple:latest
+    container_name: botfights-tor
+    restart: unless-stopped
+    volumes:
+      - tor-keys:/var/lib/tor/botfights
+      - ./torrc:/etc/tor/torrc:ro
+    depends_on:
+      - botfights
+    networks:
+      - tornet
+
+networks:
+  tornet:
+
+volumes:
+  tor-keys: