Correct installation and client connection instructions - #178

Summary

• Keep local Docker recipes on loopback and quote or guard credential inputs.
• Pass Node.js/Python credentials through driver authentication options, including trusted-certificate examples, rather than interpolating raw credentials into URIs.
• Clarify five-package selected-major installs and the optional PG18 meta package.
• Make MongoDB signing-key import rerunnable and explain that package removal preserves database data.
• Add focused regression coverage for these instruction contracts.

Validation

• Diff and focused static contract checks passed.
• The audit reproduced reserved-character URI failures and the second-run GPG failure in isolated Docker environments.
• CI passed, including lint, tests, the Next.js build, YAML validation, and package-repository checks. Local npm was not retried.
• No dependency, release-tag, binary, or renderer changes.

Coordination

This corrects the website's curated instructions. Companion documentdb/docs#75 updates the raw Markdown; merge that update before the website deployment so both copies remain consistent.

The published release note has already been clarified and now points to the safe live Docker quickstart instead of the immutable tagged README. Its tag, change list, and 24 assets are unchanged.

AI disclosure

Prepared with GitHub Copilot assistance. Human review and approval are required.