update nginx config
- signal-cli-bot.service: runs signal-cli daemon on 127.0.0.1:8081 - github-to-signal.service: depends on signal-cli-bot, auto-starts it - nginx reverse proxy with TLS termination - README updated with full deployment instructions