fix: tighten internal semantic compose contracts

scripts/unified-deployment-smoke.sh

@@ -518,7 +518,8 @@ task13_build_thothctl() {
 task13_assert_rendered_contract() {
   local services rendered
   services="$(task13_compose config --services | sort)"
-  [[ "$services" == $'core\nfrontend' ]] || task13_fail "rendered stack is not exactly core and frontend"
+  [[ "$services" == $'core\nembedding\nembedding-model-init\nfrontend\nqdrant' ]] \
+    || task13_fail "rendered stack is not the mandatory internal semantic topology"
   rendered="$TASK13_TMP/rendered-compose.yaml"
   task13_compose config >"$rendered"
   if grep -Eqi 'docker\.sock|/var/run/docker' "$rendered"; then
@@ -527,9 +528,14 @@ task13_assert_rendered_contract() {
   if grep -Fq "$TASK13_SECRET_VALUE" "$rendered"; then
     task13_fail "rendered Compose exposed the fixture secret"
   fi
-  for endpoint in THT_DWH_REST_URL THT_VEC_REST_URL THT_OLLAMA_URL THT_LLM_URL; do
+  for endpoint in THT_DWH_REST_URL THT_LLM_URL \
+    THT_INTERNAL_QDRANT_URL THT_INTERNAL_EMBEDDING_URL \
+    THT_INTERNAL_EMBEDDING_MODEL THT_INTERNAL_EMBEDDING_DIMENSIONS; do
     grep -Fq "$endpoint" "$rendered" || task13_fail "rendered Compose lacks $endpoint"
   done
+  if grep -Eq 'THT_VEC_REST_URL|THT_VEC_WRITE_REST_URL|THT_OLLAMA_URL' "$rendered"; then
+    task13_fail "rendered Compose still exposes retired external semantic bindings"
+  fi
 }
 
 task13_start_stack() {