fix(runtime): serialize deploys and clarify regional sources

backend/tests/test_rc5_release_deployment.py

@@ -36,6 +36,17 @@ def test_release_deploy_preserves_immutable_and_previous_images() -> None:
     assert "Deployed immutable image" in script
 
 
+def test_release_and_container_replacement_are_serialized() -> None:
+    release_script = (ROOT / "deploy" / "unraid" / "deploy-release.sh").read_text(encoding="utf-8")
+    run_script = (ROOT / "deploy" / "unraid" / "run-dockerman-container.sh").read_text(encoding="utf-8")
+
+    assert "GEOINTEL_DEPLOY_LOCK_FILE" in release_script
+    assert "flock -n 9" in release_script
+    assert "GEOINTEL_CONTAINER_LOCK_FILE" in run_script
+    assert "flock -w 300 8" in run_script
+    assert "GeoIntel container removal did not complete within 60 seconds" in run_script
+
+
 def test_runtime_configuration_is_validated_before_container_replacement() -> None:
     run_script = (ROOT / "deploy" / "unraid" / "run-dockerman-container.sh").read_text(encoding="utf-8")
 

backend/tests/test_sprint31_unraid_template.py

@@ -66,6 +66,7 @@ def test_unraid_template_exposes_every_operator_owned_runtime_setting() -> None:
     bridged_or_internal = {
         "GEOINTEL_FRONTEND_PORT",
         "GEOINTEL_BACKUPS_PATH",
+        "GEOINTEL_CONTAINER_LOCK_FILE",
         "GEOINTEL_IMAGE",
         "GEOINTEL_MODELS_PATH",
         "GEOINTEL_POSTGIS_DATA_PATH",