docs: explain how to use mkcert generated locally-trusted certificates

[tho]

I chose to mount the certificate and key because it seems simpler than the alternative of passing them during the docker build process and including them in the nginx image. Furthermore, it avoids including the sensitive key the image.