feat(deploy): add cf-orch routing to cloud compose

- CF_ORCH_URL, CF_APP_NAME, COORDINATOR_URL env vars in api service
- COORDINATOR_PAGEPIPER_KEY wired from .env
- extra_hosts: host.docker.internal:host-gateway for container → host Ollama
- .env.cloud.example updated with COORDINATOR_PAGEPIPER_KEY placeholder

.env.cloud.example

@@ -16,3 +16,7 @@ PAGEPIPER_CHAT_MODEL=mistral:7b
 # Heimdall license server (optional — for per-user tier validation)
 HEIMDALL_URL=https://license.circuitforge.tech
 HEIMDALL_ADMIN_TOKEN=
+
+# cf-orch streaming proxy — coordinator product key
+# Must match COORDINATOR_PRODUCT_KEYS["pagepiper"] in cf-orch.env on the coordinator
+COORDINATOR_PAGEPIPER_KEY=

compose.cloud.yml

@@ -17,6 +17,13 @@ services:
       PAGEPIPER_BOOKS_DIR: /devl/pagepiper-cloud-data/books
       # PAGEPIPER_OLLAMA_URL — set in .env (BYOK gate for hybrid search + RAG)
       # HEIMDALL_URL, HEIMDALL_ADMIN_TOKEN — set in .env for license validation
+      # cf-orch: route LLM inference through coordinator for managed GPU access
+      CF_ORCH_URL: http://host.docker.internal:7700
+      CF_APP_NAME: pagepiper
+      COORDINATOR_URL: http://10.1.10.71:7700
+      COORDINATOR_PAGEPIPER_KEY: ${COORDINATOR_PAGEPIPER_KEY:-}
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
     volumes:
       - /devl/pagepiper-cloud-data:/devl/pagepiper-cloud-data
       - ${HOME}/.config/circuitforge:/root/.config/circuitforge:ro