Fix Tor control password setup

[Recoveredd]

Fixes #1

Summary

• derive the Tor hashed control password at container startup from TOR_CONTROL_PASSWORD
• pass the same TOR_CONTROL_PASSWORD to the Tor client and Knots so onion service authentication cannot drift
• wait for the Tor client healthcheck before starting Knots
• document that the hash is now generated automatically

Testing

• ruby -e "require 'yaml'; YAML.load_file('docker-compose.yml')"
• sh -n services/tor-client/entrypoint.sh
• git diff --check

Note: I could not run docker compose config locally because Docker is not installed in this environment.