deploy(calc): add docker-compose, cloudflared tunnel, SSO config

- docker-compose.macmini.yml: calc-web service on port 5026
- cloudflared-config.yml: calc.mana.how → localhost:5026
- mana-auth trusted origins: add https://calc.mana.how
- mana-credits & mana-user CORS: add https://calc.mana.how
- Dockerfile port updated from 5018 to 5026 (5018 used by zitare)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

services/mana-auth/src/auth/better-auth.config.ts

@@ -241,6 +241,7 @@ export function createBetterAuth(databaseUrl: string) {
 			'https://auth.mana.how',
 			'https://mana.how',
 			// Production domains - all apps (keep alphabetical)
+			'https://calc.mana.how',
 			'https://calendar.mana.how',
 			'https://chat.mana.how',
 			'https://clock.mana.how',