Use Sinbad2 production ports 8068 (backend) and 8069 (frontend).

Apache ProxyPass targets host port 8069; update compose, CI, CORS defaults, deployment docs, and production .env files for https://sinbad2.ujaen.es/generadorexamenesllm/.

docker-compose.yml

@@ -10,12 +10,12 @@ services:
       PUBLIC_BASE_URL: ${PUBLIC_BASE_URL:-https://sinbad2.ujaen.es/generadorexamenesllm}
       TRUSTED_HOSTS: ${TRUSTED_HOSTS:-sinbad2.ujaen.es,localhost,127.0.0.1}
       # Sobrescribe backend/.env con el origen público del frontend en despliegue.
-      ALLOWED_ORIGINS: ${ALLOWED_ORIGINS:-https://sinbad2.ujaen.es,http://sinbad2.ujaen.es,http://sinbad2.ujaen.es:8075}
+      ALLOWED_ORIGINS: ${ALLOWED_ORIGINS:-https://sinbad2.ujaen.es,http://sinbad2.ujaen.es,http://sinbad2.ujaen.es:8069}
       LLM_BASE_URL: 
       LLM_MODEL: qwen3.5:35b
       LLM_TIMEOUT_SECONDS: "180"
     ports:
-      - "${BACKEND_PORT:-8074}:8074"
+      - "${BACKEND_PORT:-8068}:8074"
     depends_on:
       db:
         condition: service_healthy
@@ -31,7 +31,7 @@ services:
         VITE_API_URL: ${VITE_API_URL:-}
         VITE_GOOGLE_CLIENT_ID: ${VITE_GOOGLE_CLIENT_ID:-}
     ports:
-      - "${FRONTEND_PORT:-8075}:80"
+      - "${FRONTEND_PORT:-8069}:80"
     depends_on:
       - backend
     restart: unless-stopped