chore(devops): dotnet release image + compose/bootstrap stabilization

Sprint SPRINT_20260417_024_DevOps_dotnet_release_image_stabilization.

- Dockerfile.platform + Dockerfile.dotnet-service adjustments for
  deterministic layer ordering and cache-friendly publish.
- devops/release/components.json updates.
- devops/compose: .env, README, legacy + stella-services docker-compose,
  stellaops env example, postgres-init 04/04b/15/16 authority + release
  schemas, setup.bootstrap.local.yaml.
- Gitea build_release.py script.
- scripts/register-local-integrations.ps1.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

devops/compose/env/stellaops.env.example

@@ -45,6 +45,11 @@ ROUTER_AUTHORITY_CLAIMS_OVERRIDES_URL=http://authority.stella-ops.local
 AUTHORITY_ISSUER=https://authority.stella-ops.local/
 AUTHORITY_PORT=8440
 AUTHORITY_OFFLINE_CACHE_TOLERANCE=00:30:00
+AUTHORITY_BOOTSTRAP_APIKEY=stellaops-dev-bootstrap-key
+
+# Local first-run bootstrap admin used by the setup wizard and live browser helpers.
+# Keep this value only for local/dev compose usage and rotate it for any shared environment.
+STELLAOPS_ADMIN_PASS=Admin@Stella2026!
 
 # Signer
 SIGNER_POE_INTROSPECT_URL=http://authority.stella-ops.local/.well-known/openid-configuration
@@ -170,8 +175,8 @@ SM_REMOTE_HSM_TIMEOUT=30000
 # DEMO DATA SEEDING
 # =============================================================================
 
-# Enable demo data seeding API endpoint (disabled in production)
-STELLAOPS_ENABLE_DEMO_SEED=true
+# Optional manual demo data seeding API endpoint. Keep disabled for truthful default installs.
+STELLAOPS_ENABLE_DEMO_SEED=false
 
 # =============================================================================
 # NETWORKING