Fix pipeline deployment with postgres

deploy/remote.sh

@@ -65,8 +65,6 @@ test -f production.env || die 'Missing production.env; follow provisioning runbo
 . "$root/production.env"
 : "${BIND_IP:?}" "${FRONTEND_PORT:?}" "${DOCKER_BIN:?}" "${DOCKER_CONFIG:?}"
 export DOCKER_CONFIG
-# Compose expands database credentials from trusted production.env, never release metadata.
-if [ -n "${DATABASE_PASSWORD:-}" ]; then export DATABASE_PASSWORD; fi
 docker_cmd() {
     if [ "${DOCKER_SUDO:-1}" = 1 ]; then
         sudo -n "$DOCKER_BIN" --config "$DOCKER_CONFIG" "$@"
@@ -76,7 +74,7 @@ docker_cmd() {
 }
 compose() {
     docker_cmd compose --project-name agiledancers-production --project-directory "$root" \
-        --env-file "$release/release.env" -f "$release/compose.yaml" "$@"
+        --env-file "$root/production.env" --env-file "$release/release.env" -f "$release/compose.yaml" "$@"
 }
 identity() {
     image=$1
@@ -111,6 +109,7 @@ health() {
 
 case "$action" in
     preflight)
+        test -n "${DATABASE_PASSWORD:-}" || die 'Missing DATABASE_PASSWORD in production.env; follow docs/persistent-storage.md before deploying S16'
         command -v timeout >/dev/null || die 'timeout is required for bounded remote operations'
         command -v curl >/dev/null || die 'curl is required'
         test -x "$DOCKER_BIN" || die 'Docker executable missing'