fix(preprocess): enforce local vector startup chain

deploy/compose.preprocess-local-vector.yaml

@@ -0,0 +1,21 @@
+services:
+  preprocess-evidence:
+    environment:
+      THT_VECTOR_READER_PASSWORD_FILE: /run/secrets/vector_reader_password
+      THT_VECTOR_WRITER_PASSWORD_FILE: /run/secrets/vector_writer_password
+    secrets: [vector_reader_password, vector_writer_password]
+    depends_on:
+      vector-migrate: {condition: service_completed_successfully}
+
+  preprocess-dwh:
+    environment:
+      THT_VECTOR_READER_PASSWORD_FILE: /run/secrets/vector_reader_password
+    secrets: [vector_reader_password]
+    depends_on:
+      vector-migrate: {condition: service_completed_successfully}
+
+secrets:
+  vector_reader_password:
+    file: ${THT_VECTOR_READER_PASSWORD_SECRET_FILE:?set THT_VECTOR_READER_PASSWORD_SECRET_FILE}
+  vector_writer_password:
+    file: ${THT_VECTOR_WRITER_PASSWORD_SECRET_FILE:?set THT_VECTOR_WRITER_PASSWORD_SECRET_FILE}

deploy/compose.preprocess.yaml

@@ -10,9 +10,6 @@ services:
     environment:
       THT_DATA_ROOT: /data
       THT_OLLAMA_URL: "${THT_OLLAMA_URL:-http://host.docker.internal:11434}"
-      THT_VECTOR_READER_PASSWORD_FILE: /run/secrets/vector_reader_password
-      THT_VECTOR_WRITER_PASSWORD_FILE: /run/secrets/vector_writer_password
-    secrets: [vector_reader_password, vector_writer_password]
     volumes:
       - thoth_data:/data
       - ./deploy/workspaces:/app/harness/workspaces:ro
@@ -28,15 +25,7 @@ services:
     command: ["mkdir -p /data/workspaces/preprocess-dwh && exec /app/docker/core-entrypoint.sh preprocess dwh --steps introspect --json -c /app/harness/workspaces/preprocess-dwh.yaml"]
     environment:
       THT_DATA_ROOT: /data
-      THT_VECTOR_READER_PASSWORD_FILE: /run/secrets/vector_reader_password
-    secrets: [vector_reader_password]
     volumes:
       - thoth_data:/data
       - ./deploy/workspaces:/app/harness/workspaces:ro
     restart: "no"
-
-secrets:
-  vector_reader_password:
-    file: ${THT_VECTOR_READER_PASSWORD_SECRET_FILE:?set THT_VECTOR_READER_PASSWORD_SECRET_FILE}
-  vector_writer_password:
-    file: ${THT_VECTOR_WRITER_PASSWORD_SECRET_FILE:?set THT_VECTOR_WRITER_PASSWORD_SECRET_FILE}