fix: close deployment decoupling review

scripts/local-vector-smoke.sh

@@ -39,6 +39,13 @@ write_bundle() {
 }
 write_bundle
 export THT_SECRETS_FILE="$bundle"
+printf '%s\n' '{}' >"$secret_dir/pi-auth.json"
+chmod 0600 "$secret_dir/pi-auth.json"
+operator_env="$secret_dir/operator.env"
+printf '%s\n' \
+  'THT_WORKSPACE_GIT_REMOTE=https://git.example.invalid/platform/thoth-workspaces.git' \
+  "PI_AUTH_FILE=$secret_dir/pi-auth.json" \
+  "THT_SECRETS_FILE=$bundle" >"$operator_env"
 # The rotation helper has an old/new file interface; these are test-only
 # scratch files and are never mounted into a Compose service.
 printf '%s' "$bootstrap_password" >"$secret_dir/bootstrap"
@@ -47,7 +54,7 @@ export THT_VECTOR_BOOTSTRAP_USER=thoth_bootstrap_smoke
 export THOTH_SMOKE_OWNER="$smoke_owner"
 
 compose() {
-  docker compose -f compose.yaml -f deploy/compose.local-vector.yaml \
+  docker compose --env-file "$operator_env" -f compose.yaml -f deploy/compose.local-vector.yaml \
     --project-name "$smoke_project" --profile local-vector "$@"
 }