docs: refresh docker hosting auth storage refs

docs/install/hetzner.md

@@ -33,6 +33,9 @@ See [Security](/gateway/security) and [VPS hosting](/vps).
 - Persist `~/.openclaw` + `~/.openclaw/workspace` on the host (survives restarts/rebuilds)
 - Access the Control UI from your laptop via an SSH tunnel
 
+That mounted `~/.openclaw` state includes `openclaw.json`, `auth-profiles.json`,
+and `.env`.
+
 The Gateway can be accessed via:
 
 - SSH port forwarding from your laptop
@@ -150,6 +153,9 @@ For the generic Docker flow, see [Docker](/install/docker).
 
     **Do not commit this file.**
 
+    This `.env` file is for container/runtime env such as `OPENCLAW_GATEWAY_TOKEN`.
+    Stored provider OAuth/API-key auth lives in the mounted `~/.openclaw/auth-profiles.json`.
+
   </Step>
 
   <Step title="Docker Compose configuration">