feat: beta deploys all services with pipeline toggle defaulting to OFF

- pipelineEnabled: true in beta so all pods run (Kargo happy)
- PIPELINE_DEFAULT_OFF=true in beta config — scheduler initializes
  the Redis toggle to OFF on first boot
- Shared Ollama (10.1.1.12:2701) between beta and paper
- Flip pipeline ON from the UI when testing, OFF when done
- Optimistic UI update for the toggle button

services/scheduler/app.py

@@ -9,6 +9,7 @@ Requirements: 2.1, 2.2, 2.3, 2.4, 2.5
 import asyncio
 import json
 import logging
+import os
 from datetime import datetime, timezone
 from typing import Any, Optional
 
@@ -501,6 +502,14 @@ async def main() -> None:
 
     logger.info("Scheduler started (tick=%ds)", SCHEDULER_TICK)
     pipeline_key = f"{PREFIX}:pipeline:enabled"
+
+    # If PIPELINE_DEFAULT_OFF is set, initialize the toggle to OFF on first boot
+    # (only if the key doesn't already exist — preserves manual overrides)
+    if os.getenv("PIPELINE_DEFAULT_OFF", "").lower() in ("1", "true", "yes"):
+        created = await rds.set(pipeline_key, "0", nx=True)
+        if created:
+            logger.info("Pipeline toggle initialized to OFF (PIPELINE_DEFAULT_OFF=true)")
+
     recovery_counter = 0
     retry_counter = 0
     cleanup_counter = 0