chore(stack): keep services green (n8n runners + qwen3 embeddings)

[POWERFULMOVES]

Summary:

• Fix n8n runners auth drift by relying on env_file (no compose-time interpolation)
• Align default embeddings to Qwen3 via TensorZero/Ollama and update docs/examples (OpenAI-compatible endpoint is /openai/v1)
• Remove stale inline citation artifacts from docs
• Add voice.agent.response.v1 contract + voice_messages migration
• Update submodules (PMOVES-BoTZ bring-up fixes, PMOVES-n8n)

Testing (2025-12-14):

• make -C pmoves smoke (PASS 15/15)
• GPU_SMOKE_STRICT=true make -C pmoves smoke-gpu (PASS)
• Voice webhook: POST http://localhost:5678/webhook/voice-agent/ingest (200, publish_ok=true)

Notes:

• PMOVES-BoTZ changes are in separate PR: fix: stabilize bring-up and overlays PMOVES-BoTZ#7; this repo points the submodule to that commit.

Summary by CodeRabbit

• New Features

  • Multi‑arch CI and image tagging, weekly yt‑dl bump workflow, new Make targets (up-all, up-bots), realtime voice services (VibeVoice/ComfyUI/Ultimate‑TTS), comfy‑watcher service, many importable n8n voice/workflows, new voice response topic + schema.

• Documentation

  • Quick health‑check, hardening tracker, secrets rotation checklist, stabilization checklist, ARTSTUFF runbooks, embedding defaults moved to Qwen3, expanded n8n persistence/setup and smoke‑test guides.

• Chores

  • Centralized env loader, move to lockfile‑constrained installs, compose/network/port normalizations, GHCR namespace/tag handling, enhanced Trivy reporting and CI artifacts.

• Tests

  • Added idempotent shutdown test for chat‑relay.

_{✏️ Tip: You can customize this high-level summary in your review settings.}