security: remove hardcoded secrets from Dockerfile — use env vars

Deploy WA gateway with HF-compliant README metadata and Dockerfile

initial commit