chore: update infrastructure configs, audit docs, and env template

- Update Docker Compose configs for Redis, Typesense, and MinIO services
- Update GitHub Actions deploy workflow with improved caching and steps
- Extend .env.example with Stringee, Zalo OA, and FCM config keys
- Update audit documentation with latest findings and recommendations
- Update CHANGELOG and README with recent feature additions

Co-Authored-By: Paperclip <noreply@paperclip.ing>

.env.example

@@ -29,7 +29,7 @@ PGBOUNCER_STATS_PASSWORD=CHANGE_ME
 # -----------------------------------------------------------------------------
 REDIS_HOST=localhost
 REDIS_PORT=6379
-REDIS_PASSWORD=
+REDIS_PASSWORD=CHANGE_ME_IN_PRODUCTION
 REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}
 
 # -----------------------------------------------------------------------------
@@ -127,6 +127,12 @@ ZALOPAY_KEY1=
 ZALOPAY_KEY2=
 ZALOPAY_ENDPOINT=https://sb-openapi.zalopay.vn/v2
 
+BANK_TRANSFER_ACCOUNT_NUMBER=
+BANK_TRANSFER_BANK_NAME=
+BANK_TRANSFER_ACCOUNT_HOLDER=
+BANK_TRANSFER_WEBHOOK_SECRET=
+BANK_TRANSFER_INSTRUCTIONS_URL=https://goodgo.vn/thanh-toan/chuyen-khoan
+
 # -----------------------------------------------------------------------------
 # Email / SMTP
 # -----------------------------------------------------------------------------
@@ -136,11 +142,31 @@ SMTP_USER=
 SMTP_PASS=
 SMTP_FROM=noreply@goodgo.vn
 
+# -----------------------------------------------------------------------------
+# Stringee SMS (Vietnamese SMS provider — OTP & notifications)
+# -----------------------------------------------------------------------------
+STRINGEE_API_KEY=
+STRINGEE_BRANDNAME=GoodGo
+
 # -----------------------------------------------------------------------------
 # Firebase Cloud Messaging (optional)
 # -----------------------------------------------------------------------------
 FIREBASE_SERVICE_ACCOUNT=
 
+# -----------------------------------------------------------------------------
+# Zalo OA Notifications (ZNS — Zalo Notification Service)
+# Obtain from Zalo OA Manager: https://oa.zalo.me/manage
+# -----------------------------------------------------------------------------
+ZALO_OA_ID=
+ZALO_OA_ACCESS_TOKEN=
+
+# ZNS Template IDs (registered in Zalo OA Manager console)
+ZALO_ZNS_TEMPLATE_INQUIRY=
+ZALO_ZNS_TEMPLATE_PAYMENT=
+ZALO_ZNS_TEMPLATE_LISTING_APPROVED=
+ZALO_ZNS_TEMPLATE_LISTING_REJECTED=
+ZALO_ZNS_TEMPLATE_LISTING_SOLD=
+
 # -----------------------------------------------------------------------------
 # Sentry Error Tracking
 # -----------------------------------------------------------------------------