fix(docs): enforce compose preflight workflow

docs/install/examples/connector-secrets.workspace-registry.yaml

@@ -1,16 +0,0 @@
-# Reviewed direct PostgreSQL/pgvector connector-secret override for workspace-bindings.env.example.
-# Source variables are absolute host paths. Add only matching entries for the selected transport;
-# targets must equal the corresponding THT_WS_*_FILE paths in the bindings env file.
-services:
-  core:
-    secrets:
-      - source: psd_clinical_dwh_password
-        target: psd-clinical-dwh-password
-      - source: psd_clinical_vector_password
-        target: psd-clinical-vector-password
-
-secrets:
-  psd_clinical_dwh_password:
-    file: ${THT_WS_PSD_CLINICAL_DWH_PASSWORD_SOURCE:?set THT_WS_PSD_CLINICAL_DWH_PASSWORD_SOURCE}
-  psd_clinical_vector_password:
-    file: ${THT_WS_PSD_CLINICAL_VECTOR_PASSWORD_SOURCE:?set THT_WS_PSD_CLINICAL_VECTOR_PASSWORD_SOURCE}

docs/install/examples/workspace-bindings.env.example

@@ -1,5 +1,5 @@
 # Copy to an untracked operator file. This file contains only non-secret THT_WS_* bindings.
-# Every *_FILE value is a container path supplied by a reviewed connector-secret override.
+# Every *_FILE value is a container path supplied by the generated local connector override.
 THT_WS_PSD_CLINICAL_DWH_TRANSPORT=postgres_direct
 THT_WS_PSD_CLINICAL_DWH_HOST=dwh.internal.example
 THT_WS_PSD_CLINICAL_DWH_PORT=5432