docs(readme): rewrite Quick Start and Enterprise sections for clarity

Split Quick Start into three numbered steps (server, CLI, IDE connect)
with accurate descriptions of what each installer actually does. Remove
the commented-out Homebrew line and the misleading pipx-first ordering.

Clarify in the Enterprise section that the same package ships for all
editions and enterprise features activate at runtime via the license key.

Co-authored-by: Hari Srinivasan <harisrini21@gmail.com>

Author: dhanpraja231

README.md

@@ -57,53 +57,59 @@ One command to install any agent into any supported IDE. The config files are ge
 
 ## Quick Start
 
-### One-line server install
+Observal has two parts: a **server** (API + web UI + databases) you self-host, and a **CLI** you install on each developer machine.
+
+### 1. Deploy the server
+
+**One-line install** (requires Docker Engine ≥ 24.0 with Compose v2):
 
 ```bash
 curl -fsSL https://raw.githubusercontent.com/BlazeUp-AI/Observal/main/install-server.sh | bash
 ```
 
-Downloads a config package, runs guided setup, pulls Docker images from GHCR, and starts the full stack.
+This downloads a Docker Compose package, runs guided setup (domain, secrets, ports), pulls container images from GHCR, and starts the full stack (API, web UI, PostgreSQL, ClickHouse, Redis, worker, load balancer, Prometheus, Grafana).
 
-### From source
+**From source** (for contributors):
 
 ```bash
 git clone https://github.com/BlazeUp-AI/Observal.git && cd Observal
 cp .env.example .env
 make up
 ```
 
-### Install the CLI
+### 2. Install the CLI
+
+**Standalone binary** (no Python required):
 
 ```bash
-# pip / pipx (all platforms)
-pipx install observal-cli
+curl -fsSL https://raw.githubusercontent.com/BlazeUp-AI/Observal/main/install.sh | bash
+```
 
-# Or with uv
-# uv tool install observal-cli
+**Python** (3.11+):
 
-# Homebrew (macOS, Linux)
-# brew install BlazeUp-AI/observal/observal-cli
+```bash
+uv tool install observal-cli
+# or: pipx install observal-cli
 ```
 
-### Connect your IDE
+### 3. Connect your IDE
 
 ```bash
 observal auth login
 observal doctor --patch
 ```
 
-This registers your IDE, installs telemetry hooks, and starts capturing sessions automatically.
+This authenticates with your server, detects your IDE, installs telemetry hooks, and starts capturing sessions automatically.
 
-Once logged in, run `/observal` inside your IDE and it'll take the wheel. Pull agents, submit components, browse the registry, run diagnostics, manage your setup:
+Once logged in, run `/observal` inside your IDE and it takes the wheel. Pull agents, submit components, browse the registry, run diagnostics:
 
 ```
 /observal pull security-auditor
 /observal scan
 /observal doctor
 ```
 
-Or just tell your agent what you want and it'll figure out the right commands via the CLI.
+Or just tell your agent what you want and it figures out the right commands.
 
 ---
 
@@ -199,9 +205,15 @@ Enterprise adds:
 
 ![Audit log with PHI sensitivity badges and chain hashes](docs/img/audit_logging.png)
 
+The server and CLI are the same package for all editions. Enterprise features activate at runtime when a valid license key is present:
+
 ```bash
-# Enterprise install
+# Pass the key during server install
 curl -fsSL https://raw.githubusercontent.com/BlazeUp-AI/Observal/main/install-server.sh | bash -s -- --license-key YOUR_KEY
+
+# Or add it later to your .env
+echo 'OBSERVAL_LICENSE_KEY=your.key' >> .env
+make rebuild
 ```
 
 ---

ee/observal_server/routes/audit.py

@@ -196,7 +196,9 @@ async def export_audit_logs(
                 ]
             ),
             media_type="application/json",
-            headers={"Content-Disposition": f"attachment; filename=observal_audit-log_{datetime.utcnow().strftime('%Y%m%dT%H%M%SZ')}.json"},
+            headers={
+                "Content-Disposition": f"attachment; filename=observal_audit-log_{datetime.utcnow().strftime('%Y%m%dT%H%M%SZ')}.json"
+            },
         )
 
     # CSV export with standard column headers
@@ -233,5 +235,7 @@ async def export_audit_logs(
     return StreamingResponse(
         iter([output.getvalue()]),
         media_type="text/csv",
-        headers={"Content-Disposition": f"attachment; filename=observal_audit-log_{datetime.utcnow().strftime('%Y%m%dT%H%M%SZ')}.csv"},
+        headers={
+            "Content-Disposition": f"attachment; filename=observal_audit-log_{datetime.utcnow().strftime('%Y%m%dT%H%M%SZ')}.csv"
+        },
     )