chore(docs+devops): cross-module doc sync + sprint archival moves + compose updates

Bundled pre-session doc + ops work:
- docs/modules/**: sync across advisory-ai, airgap, cli, excititor,
  export-center, findings-ledger, notifier, notify, platform, router,
  sbom-service, ui, web (architectural + operational updates)
- docs/features/**: updates to checked excititor vex pipeline,
  developer workspace, quick verify drawer
- docs top-level: README, quickstart, API_CLI_REFERENCE, UI_GUIDE,
  code-of-conduct/TESTING_PRACTICES updates
- docs/qa/feature-checks/: FLOW.md + excititor state update
- docs/implplan/: remaining sprint updates + new Concelier source
  credentials sprint (SPRINT_20260422_003)
- docs-archived/implplan/: 30 sprint archival moves (ElkSharp series,
  misc completed sprints)
- devops/compose: .env + services compose + env example + router gateway
  config updates

File-level granularity preserved.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

devops/compose/docker-compose.stella-services.yml

@@ -1194,6 +1194,8 @@ services:
       Authority__ResourceServer__BypassNetworks__1: "127.0.0.1/32"
       Authority__ResourceServer__BypassNetworks__2: "::1/128"
       TIMELINE_Postgres__Timeline__ConnectionString: "${STELLAOPS_POSTGRES_CONNECTION}"
+      TIMELINE_Ingestion__Redis__Enabled: "true"
+      TIMELINE_Ingestion__Redis__ConnectionString: "cache.stella-ops.local:6379"
       Router__Enabled: "${TIMELINE_SERVICE_ROUTER_ENABLED:-true}"
       Router__Messaging__ConsumerGroup: "timeline"
     volumes:
@@ -1583,6 +1585,7 @@ services:
       ASPNETCORE_URLS: "http://+:8080"
       <<: [*kestrel-cert, *router-microservice-defaults, *gc-light]
       ConnectionStrings__Default: "${STELLAOPS_POSTGRES_CONNECTION}"
+      RegistryTokenService__Postgres__ConnectionString: "${STELLAOPS_POSTGRES_CONNECTION}"
       RegistryTokenService__Signing__Issuer: "http://registry-token.stella-ops.local"
       RegistryTokenService__Signing__KeyPath: "/app/etc/certs/kestrel-dev.pfx"
       RegistryTokenService__Signing__Lifetime: "00:05:00"
@@ -1715,6 +1718,7 @@ services:
       <<: [*kestrel-cert, *router-microservice-defaults, *gc-light]
       ConnectionStrings__Default: "${STELLAOPS_POSTGRES_CONNECTION}"
       ConnectionStrings__Redis: "cache.stella-ops.local:6379"
+      SbomService__PostgreSQL__ConnectionString: "${STELLAOPS_POSTGRES_CONNECTION}"
       Router__Enabled: "${SBOMSERVICE_ROUTER_ENABLED:-true}"
       Router__Messaging__ConsumerGroup: "sbomservice"
     volumes:
@@ -1917,6 +1921,7 @@ services:
       <<: [*kestrel-cert, *router-microservice-defaults, *gc-light]
       ConnectionStrings__Default: "${STELLAOPS_POSTGRES_CONNECTION}"
       ConnectionStrings__Redis: "cache.stella-ops.local:6379"
+      Signals__Postgres__ConnectionString: "${STELLAOPS_POSTGRES_CONNECTION}"
       Authority__ResourceServer__Authority: "https://authority.stella-ops.local/"
       Authority__ResourceServer__MetadataAddress: "https://authority.stella-ops.local/.well-known/openid-configuration"
       Authority__ResourceServer__RequireHttpsMetadata: "false"
@@ -1954,8 +1959,10 @@ services:
     environment:
       ASPNETCORE_URLS: "http://+:8080"
       <<: [*kestrel-cert, *router-microservice-defaults, *gc-medium]
+      ConnectionStrings__Default: "${STELLAOPS_POSTGRES_CONNECTION}"
       ADVISORYAI__AdvisoryAI__SbomBaseAddress: "${ADVISORY_AI_SBOM_BASEADDRESS:-http://scanner.stella-ops.local}"
       ADVISORYAI__AdvisoryAI__Queue__DirectoryPath: "/var/lib/advisory-ai/queue"
+      ADVISORYAI__AdvisoryAI__Storage__ConnectionString: "${STELLAOPS_POSTGRES_CONNECTION}"
       ADVISORYAI__AdvisoryAI__Storage__PlanCacheDirectory: "/var/lib/advisory-ai/plans"
       ADVISORYAI__AdvisoryAI__Storage__OutputDirectory: "/var/lib/advisory-ai/outputs"
       ADVISORYAI__AdvisoryAI__Chat__Enabled: "true"
@@ -2002,8 +2009,10 @@ services:
       - scanner-web
     environment:
       <<: [*kestrel-cert, *gc-medium]
+      ConnectionStrings__Default: "${STELLAOPS_POSTGRES_CONNECTION}"
       ADVISORYAI__AdvisoryAI__SbomBaseAddress: "${ADVISORY_AI_SBOM_BASEADDRESS:-http://scanner.stella-ops.local}"
       ADVISORYAI__AdvisoryAI__Queue__DirectoryPath: "/tmp/advisory-ai/queue"
+      ADVISORYAI__AdvisoryAI__Storage__ConnectionString: "${STELLAOPS_POSTGRES_CONNECTION}"
       ADVISORYAI__AdvisoryAI__Storage__PlanCacheDirectory: "/tmp/advisory-ai/plans"
       ADVISORYAI__AdvisoryAI__Storage__OutputDirectory: "/tmp/advisory-ai/outputs"
       ADVISORYAI__AdvisoryAI__Inference__Mode: "${ADVISORY_AI_INFERENCE_MODE:-Local}"