No functional change -- this comment-only edit exists to trigger a real deploy of the ai stack so provision-secrets' ai) case, and the AI_ var-name fix from PR #7, get exercised end-to-end for the first time. Documents that MCPO_API_KEY is intentionally still manual/unmigrated.