fix: close deployment decoupling review

scripts/test-container-deployment.sh

@@ -9,10 +9,13 @@ expected_pi_version=$(sed -n 's/^ARG PI_VERSION=//p' docker/core.Dockerfile)
 trap 'docker compose --project-name "$project" -f compose.yaml -f deploy/compose.local.yaml down --volumes --remove-orphans >/dev/null 2>&1 || true; rm -rf "$tmp"' EXIT HUP INT TERM
 
 test -n "$expected_pi_version"
-printf '{}\n' >"$tmp/pi-auth.json"
+printf '%s\n' '{"zai":{"type":"api_key","key":"fixture-native-auth-key"}}' >"$tmp/pi-auth.json"
 chmod 0600 "$tmp/pi-auth.json"
+printf '%s\n' 'THT_MODEL_API_KEY=fixture-model-api-key' >"$tmp/thothii.secrets"
+chmod 0600 "$tmp/thothii.secrets"
 
 export PI_AUTH_FILE="$tmp/pi-auth.json"
+export THT_SECRETS_FILE="$tmp/thothii.secrets"
 export THT_WORKSPACE_GIT_REMOTE="https://git.example.invalid/thothii/workspaces.git"
 # Let Docker assign loopback ports so this isolated contract test never collides with an operator stack.
 export THOTH_CORE_HTTP_PORT=0
@@ -62,6 +65,10 @@ docker compose --project-name "$project" -f compose.yaml -f deploy/compose.local
   test "$(pi --version)" = "$PI_VERSION"
   command -v pi >/dev/null
   test ! -e /var/run/docker.sock
+  test -r /home/thoth/.pi/agent/auth.json
+  test -r /home/thoth/.pi/agent/models.json
+  test -r /home/thoth/.pi/agent/settings.json
+  test -r /run/secrets/thothii.secrets
   touch /data/.task5-writable
   rm /data/.task5-writable
   if find /app /home /data -xdev \( -iname "*chirone*" -o -iname "*omics*portal*" \) -print -quit | grep -q .; then