fix: deploy-dev compose template token handling, use .env file

- compose templates use ${VEILRENDER_API_TOKEN:-changeme} default
- deploy-dev sed injects token from remote .env
- Pool mode deploy verified with gateway + cloakhq/cloakbrowser

Makefile

@@ -82,7 +82,8 @@ endif
 	scp $$COMPOSE_SRC $(SSH_TARGET):$(DEVTEST_STACK)/compose.yaml; \
 	ssh $(SSH_TARGET) \
 		'cd $(DEVTEST_STACK) && \
-		 sed -i "s|image: oaklight/veilrender:.*|image: $(DOCKER_IMAGE):dev-test|" compose.yaml && \
+		 sed -i "s|image: oaklight/veilrender:[^ ]*|image: $(DOCKER_IMAGE):dev-test|" compose.yaml && \
+		 sed -i "s|VEILRENDER_API_TOKEN=changeme|VEILRENDER_API_TOKEN=$${VEILRENDER_API_TOKEN:-changeme}|" compose.yaml && \
 		 docker compose up -d --force-recreate && \
 		 sleep 5 && \
 		 echo "=== Health check ===" && \

deploy/compose-pool.yaml

@@ -16,7 +16,7 @@ services:
     ports:
       - "7860:7860"
     environment:
-      - VEILRENDER_API_TOKEN=${VEILRENDER_API_TOKEN:?Set VEILRENDER_API_TOKEN}
+      - VEILRENDER_API_TOKEN=${VEILRENDER_API_TOKEN:-changeme}
       - VEILRENDER_RESOURCE_FILTER=true
       - VEILRENDER_WORKERS=http://browser-worker:9222
       - VEILRENDER_WORKER_MAX_CONCURRENT=${VEILRENDER_WORKER_MAX_CONCURRENT:-5}

deploy/compose.yaml

@@ -7,7 +7,7 @@ services:
     ports:
       - "7860:7860"
     environment:
-      - VEILRENDER_API_TOKEN=${VEILRENDER_API_TOKEN:?Set VEILRENDER_API_TOKEN}
+      - VEILRENDER_API_TOKEN=${VEILRENDER_API_TOKEN:-changeme}
       - VEILRENDER_RESOURCE_FILTER=true
     volumes:
       - veilrender-data:/data