fix(docs): export compose tool paths

scripts/test-verify-workspace-install-docs.sh

@@ -11,6 +11,8 @@ trap 'rm -f "$output"' EXIT HUP INT TERM
 for fixture in \
   "local manual requires generated connector override and Compose preflight" \
   "server manual requires generated connector override and Compose preflight" \
+  "local documented shell environment fixture" \
+  "server documented shell environment fixture" \
   "copied local base fixture" \
   "copied server PostgreSQL/TLS fixture" \
   "copied HTTPS Git override fixture" \
@@ -28,6 +30,23 @@ for fixture in \
   }
 done
 
+for manual in \
+  "$root/docs/install/local-workspace-registry.md" \
+  "$root/docs/install/server-workspace-registry.md"; do
+  grep -Fq 'export THT_SOURCE_ROOT=/absolute/path/to/ThothII' "$manual" || {
+    echo "installation manual does not publish a self-contained THT_SOURCE_ROOT export: $manual" >&2
+    exit 1
+  }
+  grep -Fq 'export THT_WORKSPACE_BINDINGS_ENV_FILE="$(pwd -P)/workspace-bindings.env"' "$manual" || {
+    echo "installation manual does not publish a self-contained bindings export: $manual" >&2
+    exit 1
+  }
+  if rg -n 'source[[:space:]]+\.env' "$manual"; then
+    echo "installation manual unsafely imports operator .env: $manual" >&2
+    exit 1
+  fi
+done
+
 if rg -n 'connector-secrets\.workspace-registry|docker compose' \
   "$root/docs/install/local-workspace-registry.md" \
   "$root/docs/install/server-workspace-registry.md"; then