refactor: remove portal deployment coupling

deploy/compose.production.yaml

@@ -1,11 +0,0 @@
-services:
-  core:
-    environment:
-      AUTH_MODE: upstream
-      THOTH_PUBLIC_EXPOSURE: "true"
-      THT_DB_NAME: ${THT_DB_NAME:?set THT_DB_NAME}
-      THT_DWH_REST_URL: ${THT_DWH_REST_URL:?set THT_DWH_REST_URL}
-      THT_VEC_REST_URL: ${THT_VEC_REST_URL:?set THT_VEC_REST_URL}
-      THT_OLLAMA_URL: ${THT_OLLAMA_URL:?set THT_OLLAMA_URL}
-      THT_DOCS_ROOT: ${THT_DOCS_ROOT:-/data/workspaces/example/evidence-source}
-      THT_SECRETS_FILE: /run/secrets/thothii.secrets

deploy/compose.psd-local.yaml.example

@@ -1,52 +0,0 @@
-services:
-  core:
-    environment:
-      AUTH_MODE: ${AUTH_MODE:-none}
-      THOTH_PUBLIC_EXPOSURE: ${THOTH_PUBLIC_EXPOSURE:-false}
-      MAX_PI_PROCESSES: ${MAX_PI_PROCESSES:-4}
-      PI_PROVIDER: ${PI_PROVIDER:?set PI_PROVIDER}
-      PI_MODEL: ${PI_MODEL:?set PI_MODEL}
-      PI_THINKING: ${PI_THINKING:-medium}
-      THT_PROFILE: ${THT_PROFILE:-workstation}
-      THT_DB_NAME: ${THT_DB_NAME:?set THT_DB_NAME}
-      THT_DWH_REST_URL: ${THT_DWH_REST_URL:?set THT_DWH_REST_URL}
-      THT_VEC_REST_URL: ${THT_VEC_REST_URL:?set THT_VEC_REST_URL}
-      THT_VEC_WRITE_REST_URL: ${THT_VEC_WRITE_REST_URL:?set THT_VEC_WRITE_REST_URL}
-      THT_OLLAMA_URL: ${THT_OLLAMA_URL:?set THT_OLLAMA_URL}
-      THT_SECRETS_FILE: /run/secrets/thothii.secrets
-      THT_DOCS_ROOT: /data/workspaces/psd
-      THT_CONFIG: /app/harness/config/tht.yaml
-    extra_hosts:
-      - host.docker.internal:host-gateway
-    networks: !override
-      default:
-        aliases: [core, thothii-core]
-    volumes:
-      - thoth_data:/data
-      - thoth_pi_config:/home/thoth/.pi
-      - ./deploy/pi/models.json:/home/thoth/.pi/agent/models.json:ro
-      - ./deploy/pi/settings.json:/home/thoth/.pi/agent/settings.json:ro
-      - ${THT_SECRETS_FILE:?set THT_SECRETS_FILE}:/run/secrets/thothii.secrets:ro
-      - ${THT_PSD_WORKSPACE_HOST_PATH:?set THT_PSD_WORKSPACE_HOST_PATH}/evidence:/data/evidence:ro
-      - ./deploy/workspaces/psd.yaml:/app/harness/config/tht.yaml:ro
-      - ${THT_PSD_WORKSPACE_HOST_PATH:?set THT_PSD_WORKSPACE_HOST_PATH}:/data/workspaces/psd
-
-  frontend:
-    build:
-      args:
-        VITE_BASE: /
-        VITE_BACKEND_URL: /api
-    ports:
-      - "127.0.0.1:8099:8080"
-    networks: !override
-      default:
-        aliases: [frontend, thothii-frontend]
-
-volumes:
-  thoth_data:
-  thoth_pi_config:
-
-networks:
-  default:
-    external: true
-    name: thothii_default

deploy/thothii.env.example

@@ -18,8 +18,9 @@ THT_VEC_PASSWORD=__CHANGE_ME__
 THT_OLLAMA_URL=http://host.docker.internal:11434
 
 # --- Backend ---
-AUTH_MODE=none                 # none | mock | oidc (in embedded l'auth è al bordo del portale)
+AUTH_MODE=none                 # none | mock | oidc (upstream auth is enforced at the proxy boundary)
 MAX_PI_PROCESSES=4
+THT_DEV_EVIDENCE_HOST_PATH=/absolute/path/to/evidence
 
 # --- Git-backed workspace registry (no secret values belong in this file) ---
 THT_WORKSPACE_REGISTRY_ROOT=/data/workspace-registry