chore: drop container labels from cadvisor, require webtop CUSTOM_USER, trim env template comments

paseo/.env.example

@@ -11,16 +11,12 @@ PASEO_PASSWORD=
 # Coolify/Dokploy must be listed here. IPs and localhost are always allowed.
 PASEO_HOSTNAMES=
 
-# Proxy source IPs whose X-Forwarded-Proto the daemon trusts. Without this it
-# trusts loopback only, reads the request as plain HTTP behind Coolify/Dokploy,
-# and tells the web UI to open ws:// from an HTTPS page -- which browsers block.
-# `uniquelocal` covers the private ranges Docker bridge networks use.
+# Proxy source IPs whose X-Forwarded-Proto the daemon trusts.
 PASEO_TRUSTED_PROXIES=uniquelocal
 
 # Agent CLIs to install on start, if not already present. Space- or
 # comma-separated, from: claude codex opencode copilot omp pi. Leave empty to
-# install none. The first start with a new paseo-home volume downloads a few
-# hundred MB per agent and takes a while; later starts only check.
+# install none.
 AGENTS=claude codex
 
 # Git identity for agents and terminals, as author and committer. git reads
@@ -28,8 +24,6 @@ AGENTS=claude codex
 GIT_NAME=
 GIT_EMAIL=
 
-# Container hostname, shown as the host label in the web UI. Without it the
-# label is a random container ID. Also passed in as HOST -- the name zsh's
-# prompt shows. Not named HOSTNAME: the deploying shell's own HOSTNAME would
-# override it.
+# Container hostname, shown as the host label in the web UI. Also passed in as
+# HOST -- the name zsh's prompt shows.
 SERVICE_HOSTNAME=paseo