chore(openspec): archive completed changes

- Archive config-secrets (FN-009) - 31 tasks complete
- Archive runfusion-poc (FN-008) - 25 tasks complete
- Archive deployment-config (FN-006) - 27 tasks complete
- All changes moved to openspec/changes/archive/

openspec/changes/archive/2026-05-14-deployment-config/specs/production-compose-stack/spec.md

@@ -0,0 +1,28 @@
+## ADDED Requirements
+
+### Requirement: Production stack includes all required services
+The system SHALL provide a production Docker Compose stack with API, web, Traefik, and PostgreSQL.
+
+#### Scenario: Stack services
+- **WHEN** the production stack is deployed
+- **THEN** the following services run: api, web, traefik, db
+- **AND** Traefik routes requests to the appropriate service
+- **AND** services communicate via isolated Docker networks
+
+#### Scenario: Environment configuration
+- **WHEN** the stack starts
+- **THEN** it reads environment variables from .env
+- **AND** sensitive values are not hardcoded
+
+### Requirement: Production stack is secure by default
+The system SHALL configure security headers and access controls in production.
+
+#### Scenario: HTTPS only
+- **WHEN** the stack runs in production
+- **THEN** all traffic uses HTTPS
+- **AND** HTTP redirects to HTTPS
+
+#### Scenario: Network isolation
+- **WHEN** the stack is deployed
+- **THEN** platform services and tool containers are on separate networks
+- **AND** tool containers cannot access the database directly