chore(docs): clarify the supported gRPC network boundary - #499

PR Summary

Low Risk
Changes are documentation, sample env vars, and test-image/filter tweaks; they do not alter server runtime code in this diff.

Overview
Aligns documentation, samples, and CI packaging with the supported topology: gRPC on the node HTTP(S) endpoint (clients, gossip, follower forwarding) and gRPC on a dedicated replication HTTP(S) listener, with no legacy EventStore TCP client or replication protocol.

Docs across networking, cluster, security, architecture, installation, upgrade, Admin UI, and diagnostics are rewritten to describe the two listeners, shared TLS, firewall expectations, and ReplicationPortAdvertiseAs (replacing deprecated TCP advertise names). The upgrade and observability sections document Monitoring.ConnectionStats / Monitoring.ReplicationStats and retired Monitoring.TcpStats, TestClient commands tied to TCP, and removal of ClientMessageDtos.proto.

Docker Compose samples and the root compose file now set EVENTSTORE_NODE_IP per node. The Dockerfile drops copying legacy TCP test CA material into the test image and adjusts EXPOSE to 1112 (replication) and 2113 (node). scripts/test.sh stops selecting TcpApiTestPlugin tests and bumps the core-services shard timeout. .gitignore drops an obsolete ClientAPI assembly version entry.

^{Reviewed by Cursor Bugbot for commit d91f707. Bugbot is set up for automated code reviews on this repo. Configure here.}

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

_{Comment @coderabbitai help to get the list of available commands.}