Update README and INSTALL with LDAP, collab, and all features

INSTALL.md

@@ -50,6 +50,14 @@ Open `http://your-host:8080` and log in with the admin credentials above.
 | `MH_LDAP_USER_FILTER` | No | `(&(objectClass=inetOrgPerson)(uid=%s))` | LDAP search filter (`%s` = username) |
 | `MH_LDAP_SKIP_TLS` | No | `false` | Skip TLS verification (for self-signed certs) |
 
+### LDAP Notes
+
+- Use `ldaps://host:636` for SLDAP (LDAP over TLS)
+- LDAP settings can also be configured from the **Admin panel** (⚙️ → 👤) without restarting
+- If a required group is set, only users who are members of that group can log in
+- On first LDAP login, a local user is auto-created (for preferences, file storage, etc.)
+- Local accounts still work alongside LDAP — local auth is tried first
+
 ## Data Volume
 
 Mount a persistent volume to `/app/data`. This contains: