refactor: merge setup.sh into update.sh for seamless first-run

- update.sh now auto-generates .env from .env.example if missing
- Generates random JWT/SALT keys on first run
- Existing .env is never overwritten
- Deleted redundant setup.sh
- Updated all documentation references

docs/portfolio/README.md

@@ -43,7 +43,6 @@ NexusGuard is a production-grade, zero-trust SD-WAN solution built with Go, Vue
 ```bash
 git clone https://git.datadunia.com/nexusguard/Nexus-Guard-Suite.git
 cd Nexus-Guard-Suite
-./setup.sh
 bash update.sh
 ```
 

docs/portfolio/deployment.md

@@ -17,13 +17,7 @@ NexusGuard supports three deployment modes: Docker (recommended), native install
 git clone https://git.datadunia.com/nexusguard/Nexus-Guard-Suite.git
 cd Nexus-Guard-Suite
 
-# Generate .env file
-./setup.sh
-
-# Edit configuration
-nano .env
-
-# Start all services
+# Start all services (auto-generates .env on first run)
 bash update.sh
 ```
 
@@ -49,7 +43,7 @@ DB_NAME=nexusguard
 # Redis
 REDIS_ADDR=redis:6379
 
-# Security (auto-generated by setup.sh)
+# Security (auto-generated by update.sh)
 JWT_SECRET=<hex-64-chars>
 SERVER_SALT=<hex-64-chars>
 

docs/portfolio/features.md

@@ -246,7 +246,6 @@ Time-limited config sharing:
 ```bash
 git clone https://git.datadunia.com/nexusguard/Nexus-Guard-Suite.git
 cd Nexus-Guard-Suite
-./setup.sh
 bash update.sh
 ```
 

docs/superpowers/specs/2026-06-21-nexusguard-portfolio-design.md

@@ -172,7 +172,7 @@ Technical and precise. Avoid marketing buzzwords. Focus on:
 
 **Content:**
 - Docker (Recommended):
-  - Quick start (setup.sh + update.sh)
+  - Quick start (bash update.sh)
   - Configuration (.env)
   - Makefile commands (up, down, logs, dev, migrate, reset-db)
 - Native Install: