fix(staging): pin verified models and resume route

docker-compose.override.yml

@@ -16,15 +16,16 @@ services:
       user-service-staging:
     environment:
       DATABASE_URL: postgres://growqr:growqr@growqr-postgres:5432/growqr
+      RESUME_SERVICE_URL: http://growqr_resume_api:8000
       SOCIAL_BRANDING_SERVICE_URL: http://host.docker.internal:18015
       SOCIAL_BRANDING_PUBLIC_URL: https://social-staging.gqr.puter.wtf
       PRODUCT_SERVICE_TIMEOUT_MS: 10000
       PRODUCT_INTERACTIVE_SERVICE_TIMEOUT_MS: 240000
       LLM_PROVIDER: opencode
       LLM_BASE_URL: https://opencode.ai/zen/v1
-      LLM_MODEL: minimax-m3
-      GROW_AGENT_MODEL: minimax-m3
-      CONVERSATION_ACTOR_MODEL: minimax-m3
+      LLM_MODEL: kimi-k2.6
+      GROW_AGENT_MODEL: kimi-k2.6
+      CONVERSATION_ACTOR_MODEL: kimi-k2.6
 
 networks:
   interview-service:

scripts/onboarding-rev10-read.test.ts

@@ -43,6 +43,11 @@ assert.match(
   "backend must join the canonical user-service staging network",
 );
 assert.doesNotMatch(compose, /name:\s+growqr-app_growqr-net/, "obsolete substitute user network must not be configured");
+assert.match(compose, /RESUME_SERVICE_URL:\s+http:\/\/growqr_resume_api:8000/, "backend must route Resume through canonical Docker DNS");
+for (const modelKey of ["LLM_MODEL", "GROW_AGENT_MODEL", "CONVERSATION_ACTOR_MODEL"]) {
+  assert.match(compose, new RegExp(`${modelKey}:\\s+kimi-k2\\.6`), `${modelKey} must stay on the verified staging model`);
+}
+assert.doesNotMatch(compose, /minimax-m3/, "staging compose must not restore the broken MiniMax model pin");
 
 const canonicalServiceNetworks = [
   ["interview-service", "interview-service_default"],