add OpenBSD TA constraints and localhost TLS examples

docker/compose.all5.yaml

@@ -1,5 +1,7 @@
 # Copy docker/examples/validate-all5.toml and set CONFIG_FILE to its absolute path.
 # Examples use text logs and automatic TA certificate refresh; TALs stay local.
+# Copy tals/*.tal and tals/*.constraints into INPUT_DIR; constraints default on.
+# Edit the copied constraints, or set ta-constraints-enabled = false in TOML.
 # See docs/docker.md for graceful stop and config reload.
 services:
   validator: