deploy(calc): add docker-compose, cloudflared tunnel, SSO config

- docker-compose.macmini.yml: calc-web service on port 5026
- cloudflared-config.yml: calc.mana.how → localhost:5026
- mana-auth trusted origins: add https://calc.mana.how
- mana-credits & mana-user CORS: add https://calc.mana.how
- Dockerfile port updated from 5018 to 5026 (5018 used by zitare)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

cloudflared-config.yml

@@ -114,6 +114,10 @@ ingress:
   - hostname: picture-api.mana.how
     service: http://localhost:3040
 
+  # Calc App
+  - hostname: calc.mana.how
+    service: http://localhost:5026
+
   # LLM Services
   - hostname: playground.mana.how
     service: http://localhost:5090