docs(release): clarify demo login and package registry

Author: JasonTM17

README.md

@@ -13,6 +13,35 @@
 [![Hardware](https://img.shields.io/badge/Hardware-USB_Camera_+_UART-F59E0B?style=for-the-badge)](#quy-tắc-camera-và-uart)
 [![Docker Hub](https://img.shields.io/badge/Docker_Hub-nguyenson1710-2496ED?style=for-the-badge&logo=docker&logoColor=white)](https://hub.docker.com/u/nguyenson1710)
 
+## Demo production login
+
+Production web: [https://trash-sorter-v2.vercel.app](https://trash-sorter-v2.vercel.app)
+
+| Field | Value |
+| --- | --- |
+| Role | `user` |
+| Username | `demo-user` |
+| Password | `TrashSorterDemo#2026!` |
+
+This is a low-privilege public demo account with seeded sample data. It cannot
+manage Admin users, devices, hardware mappings, or system-wide settings. Rotate
+this password if the account is abused. Real Admin credentials must stay private
+and must not be committed to this repository.
+
+## Container/package note
+
+Docker Hub is the complete artifact registry for this project:
+
+- `nguyenson1710/trash-sorter-web`
+- `nguyenson1710/trash-sorter-agent`
+- `nguyenson1710/trash-sorter-models`
+- `nguyenson1710/trash-sorter-desktop-exe`
+- `nguyenson1710/trash-sorter-dataset-archive`
+
+GitHub Packages may show only four packages. That is expected: the large split
+dataset/cache archive is intentionally kept on Docker Hub only as
+`trash-sorter-dataset-archive` plus `part01` to `part10` payload images.
+
 ## Tổng quan kỹ thuật
 
 Trash Sorter Pro là một hệ sinh thái AI phân loại rác end-to-end, thiết kế theo hướng

docs/docker-production-stack.md

@@ -200,6 +200,26 @@ section. The workflow never receives Docker Hub credentials because it reads
 the public source images and authenticates to GHCR with the repository-scoped
 `GITHUB_TOKEN`.
 
+### Why GitHub Packages shows four packages
+
+The GitHub repository **Packages** tab is a GHCR mirror, not the source of truth
+for large release artifacts. It intentionally shows four packages:
+
+- `trash-sorter-web`
+- `trash-sorter-agent`
+- `trash-sorter-models`
+- `trash-sorter-desktop-exe`
+
+The fifth artifact, `trash-sorter-dataset-archive`, is intentionally published
+on Docker Hub only because it is a large split dataset/cache archive with ten
+payload part images. Seeing **4 packages** on GitHub is expected; the complete
+artifact set is under Docker Hub namespace `nguyenson1710`.
+
+Final 2026-06-30 Docker Hub sync tags were also created for commit
+`4ff451405b95` and short tag `4ff4514`. Runtime code did not change after that
+sync except documentation-only commits, and documentation is excluded from the
+runtime Docker build context.
+
 ## Dataset archive on Docker Hub
 
 Large training data is published as non-runtime artifact images. The runtime