Defaults matchar servern: intern CODE över HTTPS (ssl.enable=true)

- collaboraUrl -> https://code:9980 överallt (config-node, example-flows,
  .env.example, docker-compose.yml, install.sh, resolve_collabora_url);
  http://code:9980 failar när CODE kör SSL
- verifyTls=false är nu ett krav (self-signed internt) i hjälptext/dok
- integrate: connect_nodered_bridge efter container-up (docker network
  connect bridge, ignorerar already connected) + verifiering via
  docker exec curl -sk https://code:9980/hosting/capabilities (HTTP 200)
- Publik URL förblir https://docs.domain.name i docs

docs/NODES.md

@@ -7,7 +7,7 @@ Six flow nodes in the palette plus one config node. All six point at the same **
 | Backend | Typical URL | Role |
 |---------|-------------|------|
 | Nextcloud | `https://cloud.example.com` | Files (WebDAV) + Office API (OCS) |
-| Collabora CODE | `http://code:9980` (intern HTTP; fallback `http://<bridge-ip>:9980`) | Conversion (`/cool/...`) on Docker bridge |
+| Collabora CODE | `https://code:9980` (intern HTTPS, self-signed; `verifyTls=false`; fallback `https://<bridge-ip>:9980`) | Conversion (`/cool/...`) on Docker bridge |
 
 Auth: **username + app password**. Not your account password.
 
@@ -167,11 +167,11 @@ Create under the gear icon in Node-RED. All six flow nodes pick the same config
 | Field | Example |
 |-------|---------|
 | nextcloudUrl | `https://cloud.example.com` |
-| collaboraUrl | `http://code:9980` — intern CODE är **HTTP**; fallback `http://<bridge-ip>:9980` efter `docker network connect bridge nextcloud-node-red` |
+| collaboraUrl | `https://code:9980` — intern CODE kör **HTTPS** (self-signed); `verifyTls=false`. Fallback `https://<bridge-ip>:9980` efter `docker network connect bridge nextcloud-node-red`. `http://code:9980` failar när CODE har `ssl.enable=true` |
 | collaboraPublicUrl | `https://docs.domain.name` (publik, browser/WOPI) |
 | username + app password | Nextcloud login |
 
-Intern CODE körs utan TLS (`http://`) — publik åtkomst går via reverse proxy (HTTPS).
+Intern CODE körs med TLS och self-signed-cert (`ssl.enable=true`) — därför `https://` + `verifyTls=false` internt; publik åtkomst går via reverse proxy (giltigt cert).
 
 ### createAssetLink (assets)