M44: harden release integrity and assurance

compose.yaml

@@ -18,6 +18,9 @@ services:
     build:
       context: .
       dockerfile: backend/Dockerfile
+      args:
+        VCS_REF: ${VCS_REF:-development}
+        BUILD_DATE: ${BUILD_DATE:-unknown}
     environment:
       MOBILITYOPS_ENV: ${MOBILITYOPS_ENV:-development}
       MOBILITYOPS_DEMO_MODE: ${MOBILITYOPS_DEMO_MODE:-true}
@@ -32,6 +35,7 @@ services:
       RAGCORE_COLLECTION: ${RAGCORE_COLLECTION:-internal-procedures}
       RAGCORE_API_TOKEN: ${RAGCORE_API_TOKEN:-}
       RAGCORE_SPACE_ID: ${RAGCORE_SPACE_ID:-}
+      RAGCORE_ANSWERS_CIRCUIT_BREAKER_SECONDS: ${RAGCORE_ANSWERS_CIRCUIT_BREAKER_SECONDS:-60}
       N8N_WEBHOOK_URL: ${N8N_WEBHOOK_URL:-http://n8n:5678/webhook/mobilityops-return}
       N8N_WEBHOOK_TRIGGER_TOKEN: ${MOBILITYOPS_WEBHOOK_TRIGGER_TOKEN:-replace-me-n8n-webhook-trigger-token}
       N8N_CALLBACK_TOKEN: ${MOBILITYOPS_CALLBACK_TOKEN:-replace-me-n8n-callback-token}
@@ -82,6 +86,8 @@ services:
         # Empty by default: the SPA calls its own origin and nginx proxies /api to the API,
         # which is what the CSP (connect-src 'self') expects. Only set this for split hosting.
         VITE_API_BASE_URL: ${VITE_API_BASE_URL:-}
+        VCS_REF: ${VCS_REF:-development}
+        BUILD_DATE: ${BUILD_DATE:-unknown}
     ports:
       - "1228:80"
     depends_on: