* fix(ci): set AI_ENCRYPTION_KEY in smoke-test env The barazo-api env schema requires AI_ENCRYPTION_KEY to be >=32 chars. The smoke-test job omitted it, so compose passed an empty string and the API crash-looped on env validation, never became healthy, and the deploy gate failed with 'barazo-api is unhealthy'. Add a dummy >=32-char value. * fix(ci): repair smoke-test.sh local-mode checks Two latent bugs surfaced once the API became healthy: - Valkey ping omitted -a $VALKEY_PASSWORD, but valkey runs with --requirepass, so ping returned NOAUTH instead of PONG. - API and frontend HTTP checks hit localhost:3000/3001, but the compose stack publishes only Caddy (port 80). Route both through Caddy, which proxies /api/* to barazo-api and everything else to barazo-web.