build(compose): make root startup the default

deploy/secrets/thothii.secrets.example

@@ -0,0 +1,20 @@
+# Copy to deploy/secrets/thothii.secrets and chmod 600.
+# Values are read as literal strings (no shell expansion or command substitution).
+# Leave unused keys out of the file.
+
+# Hosted model provider (single-key providers only).
+# THT_MODEL_API_KEY=replace-me
+
+# External DWH and vector adapters.
+# THT_DWH_API_KEY=replace-me
+# THT_VEC_API_KEY=replace-me
+# THT_VEC_WRITE_API_KEY=replace-me
+
+# Optional local-vector roles.
+# THT_VECTOR_BOOTSTRAP_PASSWORD=replace-me
+# THT_VECTOR_MIGRATOR_PASSWORD=replace-me
+# THT_VECTOR_READER_PASSWORD=replace-me
+# THT_VECTOR_WRITER_PASSWORD=replace-me
+
+# Optional CA material/path understood by the configured adapter.
+# THT_CA=/run/secrets/ca-chain.pem