docs: describe read-only workspace runtime configuration

deploy/psd/operator.env.example

@@ -2,18 +2,14 @@
 THT_WORKSPACE_GIT_REMOTE=git@github.com:mptyl/tht-workspace-psd.git
 THT_WORKSPACE_GIT_BRANCH=main
 THT_WORKSPACE_INSTALLATION_ID=psd-local
-THT_WORKSPACE_GIT_AUTHOR_NAME="Thoth PSD"
-THT_WORKSPACE_GIT_AUTHOR_EMAIL=thoth-psd@example.invalid
 THT_WORKSPACE_GIT_SSH_KEY_FILE=<abs>/deploy/psd/secrets/git-ssh-key
 THT_WORKSPACE_GIT_KNOWN_HOSTS_FILE=<abs>/deploy/psd/secrets/git-known-hosts
 
 # App
 THT_SECRETS_FILE=<abs>/deploy/psd/secrets/thothii.secrets
 PI_AUTH_FILE=<abs>/deploy/psd/secrets/pi-auth.json
-THT_WORKSPACE_BINDINGS_ENV_FILE=<abs>/deploy/psd/workspace-bindings.env
-
-# Connector secret sources (host-only paths)
-THT_WS_PSD_CLINICAL_DWH_API_KEY_SOURCE=<abs>/deploy/psd/secrets/psd-clinical-dwh-api-key
+# DWH and Evidence credentials are entered later in Workspace management and stored encrypted
+# by the backend. They do not depend on host filesystem paths.
 
 # Pi (LLM)
 PI_PROVIDER=zai