chore: comment out port mapping in docker-compose

Match word2sim's pattern — port stays unexposed by default; caller
uncomments only if they want to reach the service from the host.
Keeps it network-internal-friendly when run behind a reverse proxy on
the same compose network.

docker-compose.yml

@@ -2,8 +2,9 @@ services:
   phow2sim:
     build: .
     container_name: phow2sim
-    ports:
-      - "8001:8000"
+    # uncomment to expose this port on the host
+    # ports:
+    #   - "8001:8000"
     environment:
       # URL serving the PhoW2V zip with a plain GET. Any auth goes in
       # the URL itself (share token, signed URL, etc.) — the service