docs: document RSS_API_TOKEN configuration

[Skulldorom]

Summary

• Adds a Docker environment variable table covering required vars and unset defaults
• Calls out optional RSS_API_TOKEN bearer auth in the Compose example
• Clarifies the RSS_API_TOKEN placeholder in .env.example

Test Plan

• uv run pytest
• git diff --check