developer(ET): auto-commit from developer run_id=749

src/config.py

@@ -452,11 +452,28 @@ class Settings(BaseSettings):
     #                                        until the budget is exhausted (D5, anti ORCH-110).
     #   staging_runner_infra_retry_delay_s-> delay before the re-queued deployer job
     #                                        (env ORCH_STAGING_RUNNER_INFRA_RETRY_DELAY_S).
+    # ORCH-123 (D6, adr-0049): the staging suite (`docker exec orchestrator-staging
+    # ... staging_check.py`) MUST run host-side over the existing trusted ssh channel
+    # (ORCH-036/058), because the prod container ships only `openssh-client git curl`
+    # — NOT a `docker` CLI (Dockerfile:11) — so `docker exec` spawned FROM INSIDE the
+    # prod container hit FileNotFoundError -> a permanent environment defect that
+    # ORCH-115 mis-routed as a code-fail rollback (incident ORCH-116). The execution
+    # CHANNEL changes (host-side ssh wrap), the suite COMMAND/contract does not.
+    #   staging_runner_exec_host_side -> True (default = boevoe) wraps the docker-exec
+    #                                    in `ssh <deploy_ssh_user>@<deploy_ssh_host>
+    #                                    '<docker exec ...>'` (mirror self_deploy /
+    #                                    image_freshness host-side docker). False ->
+    #                                    the prior in-container `docker exec` (valid
+    #                                    ONLY where a docker CLI is baked into the
+    #                                    image; the current prod image has none). env
+    #                                    ORCH_STAGING_RUNNER_EXEC_HOST_SIDE. Rollback:
+    #                                    set False -> the prior in-container call 1:1.
     staging_runner_enabled: bool = True
     staging_runner_repos: str = ""
     staging_runner_timeout_s: int = 600
     staging_runner_infra_max_retries: int = 2
     staging_runner_infra_retry_delay_s: int = 30
+    staging_runner_exec_host_side: bool = True
 
     # ORCH-098 (FND/F2): machine lessons-journal — additive `lessons` table + leaf
     # src/lessons.py (never-raise observer, by образцу serial_gate/coverage_gate/