Add screenshots to README and docs site

Captured from a fresh theta-env install with demo data, via headless
Chrome + Playwright (scripted login, no manual UI interaction needed to
reproduce).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

README.md

@@ -18,6 +18,17 @@ proxy serves them over TLS with auto-renewing certs and no downtime on changes.
 
 **Documentation:** [https://theta42.github.io/proxy/](https://theta42.github.io/proxy/)
 
+## Screenshots
+
+| Hosts | Authentication |
+| --- | --- |
+| ![Host list](docs/images/hosts.png) | ![Per-host SSO auth](docs/images/host-auth-sso.png) |
+
+Basic auth and SSO are mutually exclusive per host, with per-user password
+management once basic auth is enabled:
+
+![Per-host basic auth](docs/images/host-auth-basic.png)
+
 ## Why this over the alternatives
 
 Nginx Proxy Manager, Traefik, and Caddy are all good reverse proxies with

docs/index.md

@@ -7,6 +7,17 @@ title: Home
 
 A reverse proxy and HTTPS termination service using OpenResty/nginx with a management API and web GUI.
 
+## Screenshots
+
+| Hosts | Authentication |
+| --- | --- |
+| ![Host list](images/hosts.png) | ![Per-host SSO auth](images/host-auth-sso.png) |
+
+Basic auth and SSO are mutually exclusive per host, with per-user password
+management once basic auth is enabled:
+
+![Per-host basic auth](images/host-auth-basic.png)
+
 ## Features
 
 - **Automated HTTPS/SSL** - Let's Encrypt integration with HTTP-01 and DNS-01 challenges