feat: HTTPS admin console on port 3443 via Traefik

Use separate port 3443 for TLS-terminated admin console access.
Port 3002 stays directly mapped from logto in dev for Logto's
internal OIDC self-discovery via ADMIN_ENDPOINT.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker-compose.dev.yml

@@ -8,6 +8,7 @@ services:
   logto:
     ports:
       - "3001:3001"
+      - "3002:3002"
 
   cameleer-saas:
     ports:

docker-compose.yml

@@ -30,7 +30,7 @@ services:
     ports:
       - "80:80"
       - "443:443"
-      - "3002:3002"
+      - "3443:3443"
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ./traefik.yml:/etc/traefik/traefik.yml:ro

traefik.yml

@@ -12,7 +12,7 @@ entryPoints:
   websecure:
     address: ":443"
   admin-console:
-    address: ":3002"
+    address: ":3443"
 
 providers:
   docker: