fix: beta stage uses paper DB to resolve permission denied errors

Beta was pointing at stonks_beta DB where tables were owned by postgres
superuser, causing permission denied for the stonks app user. Switch to
sharing stonks_paper DB/user (already has proper grants). DEPLOY_STAGE=beta
still isolates Redis keys and MinIO buckets. Added market data API key
so beta can test ingestion when pipeline is toggled ON.

infra/helm/stonks-oracle/values-beta.yaml

@@ -19,6 +19,9 @@ services:
     replicas: 1
 
 ## Beta-specific config overrides
+## Beta shares the paper DB — DEPLOY_STAGE=beta isolates Redis keys
+## (stonks:beta:*) and MinIO buckets (beta-stonks-*). Pipeline defaults
+## to OFF so beta won't write conflicting data unless explicitly enabled.
 config:
   DEPLOY_STAGE: "beta"
   LOG_LEVEL: "DEBUG"
@@ -28,19 +31,22 @@ config:
   # Use same infra services (shared postgres/redis/minio)
   POSTGRES_HOST: "postgresql-rw.postgresql-service.svc.cluster.local"
   POSTGRES_PORT: "5432"
-  POSTGRES_DB: "stonks_beta"
-  POSTGRES_USER: "stonks"
+  POSTGRES_DB: "stonks_paper"
+  POSTGRES_USER: "stonks_paper"
   REDIS_HOST: "redis-master.redis-service.svc.cluster.local"
   REDIS_PORT: "6379"
   REDIS_DB: "1"
   MINIO_ENDPOINT: "minio.minio-service.svc.cluster.local:80"
   MINIO_SECURE: "false"
   BROKER_MODE: "paper"
+  BROKER_PROVIDER: "alpaca"
   OLLAMA_BASE_URL: "http://10.1.1.12:2701"
   MARKET_DATA_BASE_URL: "https://api.polygon.io"
   PIPELINE_DEFAULT_OFF: "true"
 
-## Blank out all secrets so beta never talks to external APIs
+## Secrets — same credentials as paper for DB/infra access.
+## Broker keys blank (TRADING_ENABLED=false), market key provided
+## so beta can test ingestion when pipeline is flipped ON.
 secrets:
   core:
     POSTGRES_PASSWORD: "St0nks0racl3!"
@@ -52,7 +58,7 @@ secrets:
     BROKER_API_SECRET: ""
     BROKER_BASE_URL: ""
   market:
-    MARKET_DATA_API_KEY: ""
+    MARKET_DATA_API_KEY: "NPwKtrLvoBxcKt3Byp5PEvuZiBZU_d8E"
 
 ## Beta ingress — separate hostnames so beta doesn't conflict with prod
 ingress: