docs(readme): improve clarity and add security guidance (#6)

* docs(readme): improve clarity and add security guidance

CHANGES
- Clarify problem statement with concrete AI command examples
- Add Docker commit hash pinning for production security
- Remove redundant sections and sync across README files
- Convert diagrams to mobile-friendly lists in dockerhub version

IMPACT
- Users better understand when to use this tool vs alternatives
- Production deployments can audit container contents for security
- Consistent messaging across GitHub and Docker Hub

* docs(README*.md): add concrete example to pin image to commit hash

* fix(README*.md): correct docker image commit hash tag format

* docs(REAME*.md): remove excess whitespace

* docs(README*.md): add action-oriented comments for docker pull

Author: KemingHe

README-dockerhub.md

@@ -2,13 +2,18 @@
 
 > README updated on 2025-07-23 by [@KemingHe](https://github.com/KemingHe)
 
-Official docs from `pip`, `poetry`, `uv`, and `conda` + automated weekly updates = zero maintenance overhead for developers using VSCode/Cursor with AI assistants. [[Demo]](https://www.loom.com/share/a80f6041dc374c07b95b2397ee4e8ca1?sid=1209cdce-7239-447e-8b20-49eae454cc9a)
+Stop getting out-of-date Python package manager commands from your AI. Cross-reference latest official `pip`, `poetry`, `uv`, and `conda` docs with auto-updates. [[Demo]](https://www.loom.com/share/a80f6041dc374c07b95b2397ee4e8ca1?sid=1209cdce-7239-447e-8b20-49eae454cc9a)
 
 ## 🚀 Quick Start for Agentic IDEs
 
-**1. Pull latest Docker image**:
+**1. Pull Docker image**:
 
 ```shell
+# Pin to commit hash for production security
+# Get current hash from: https://hub.docker.com/r/keminghe/py-dep-man-companion/tags
+docker pull keminghe/py-dep-man-companion@sha256:2c896dc617e8cd3b1a1956580322b0f0c80d5b6dfd09743d90859d2ef2b71ec6  # 2025-07-22 release example
+
+# Or use latest for development
 docker pull keminghe/py-dep-man-companion:latest
 ```
 
@@ -27,29 +32,14 @@ docker pull keminghe/py-dep-man-companion:latest
 }
 ```
 
-**3. Query official docs directly in your AI chat** - guaranteed fresh from weekly automated updates.
+**3. Ask package manager questions** - "How to migrate a `conda` project to `uv`?" and get accurate, current official syntax.
 
 ## 🔄 Auto-Update Architecture
 
-```plaintext
-┌───────────────────────────┐
-│  ⏰ Every Tuesday 6pm ET  │
-└─────────────┬─────────────┘
-              ▼
-┌───────────────────────────┐
-│  📚 Sync Official Docs    │
-└─────────────┬─────────────┘
-              ▼
-┌───────────────────────────┐
-│  🔍 Rebuild Search Index  │
-└─────────────┬─────────────┘
-              ▼
-┌───────────────────────────┐
-│  🐳 Publish Latest Image  │
-└───────────────────────────┘
-```
-
-**Zero maintenance**: Documentation automatically synced weekly from official sources. Docker `:latest` tag guarantees you always get current docs without manual updates.
+1. ⏰ **Every Tuesday 6pm ET**
+2. 📚 **Sync Official Docs**
+3. 🔍 **Rebuild Search Index**
+4. 🐳 **Publish Latest Image**
 
 ## 🤝 Contributing
 

README.md

@@ -2,13 +2,18 @@
 
 > README updated on 2025-07-23 by [@KemingHe](https://github.com/KemingHe)
 
-Official docs from `pip`, `poetry`, `uv`, and `conda` + automated weekly updates = zero maintenance overhead for developers using VSCode/Cursor with AI assistants. [[Demo]](https://www.loom.com/share/a80f6041dc374c07b95b2397ee4e8ca1?sid=1209cdce-7239-447e-8b20-49eae454cc9a)
+Stop getting out-of-date Python package manager commands from your AI. Cross-reference latest official `pip`, `poetry`, `uv`, and `conda` docs with auto-updates. [[Demo]](https://www.loom.com/share/a80f6041dc374c07b95b2397ee4e8ca1?sid=1209cdce-7239-447e-8b20-49eae454cc9a)
 
 ## 🚀 Quick Start for Agentic IDEs
 
-**1. Pull latest Docker image**:
+**1. Pull Docker image**:
 
 ```shell
+# Pin to commit hash for production security
+# Get current hash from: https://hub.docker.com/r/keminghe/py-dep-man-companion/tags
+docker pull keminghe/py-dep-man-companion@sha256:2c896dc617e8cd3b1a1956580322b0f0c80d5b6dfd09743d90859d2ef2b71ec6  # 2025-07-22 release example
+
+# Or use latest for development
 docker pull keminghe/py-dep-man-companion:latest
 ```
 
@@ -27,7 +32,7 @@ docker pull keminghe/py-dep-man-companion:latest
 }
 ```
 
-**3. Query official docs directly in your AI chat** - guaranteed fresh from weekly automated updates.
+**3. Ask package manager questions** - "How to migrate a `conda` project to `uv`?" and get accurate, current official syntax.
 
 ## 🤝 Contributing
 
@@ -49,8 +54,6 @@ graph LR
     INDEX --> DOCKER
 ```
 
-**Zero maintenance**: Documentation automatically synced weekly from official sources. Docker `:latest` tag guarantees you always get current docs without manual updates.
-
 ## 🗺️ Roadmap
 
 - [ ] Add support for `pipenv`, `pdm`, `pixi`