fix: beta trading pipeline — max_tokens default, approval re-enqueue, credentials

- Migration 031: change ai_agents/agent_variants max_tokens default
  from 32768 to 4096 (32768 exceeds vLLM context window, causing
  HTTP 400 on every extraction)
- API: re-enqueue approved orders to broker queue — previously
  approved orders sat in DB with nothing to execute them
- values-beta: enable TRADING_ENABLED, update Alpaca paper keys

services/api/app.py

@@ -41,7 +41,7 @@ from services.shared.audit import get_entity_audit_trail, get_order_audit_trail,
 from services.shared.config import load_config
 from services.shared.db import get_pg_pool, get_redis
 from services.shared.logging import new_trace_id, set_trace_context, setup_logging
-from services.shared.redis_keys import PREFIX, QUEUE_PREFIX, queue_key
+from services.shared.redis_keys import PREFIX, QUEUE_BROKER, QUEUE_PREFIX, queue_key
 from services.shared.schemas import MAJOR_DECISION_CATALYSTS
 
 logger = logging.getLogger("query_api")
@@ -1391,12 +1391,24 @@ async def review_approval_request(
            SET status = $2, reviewed_by = $3, review_note = $4,
                reviewed_at = $5, updated_at = NOW()
            WHERE id = $1::uuid AND status = 'pending'
-           RETURNING id, ticker, status, reviewed_by""",
+           RETURNING id, ticker, status, reviewed_by, order_job""",
         approval_id, new_status, reviewed_by, review_note, now,
     )
     if not row:
         raise HTTPException(404, "Approval not found or no longer pending")
-    return _row_to_dict(row)
+
+    # Re-enqueue approved orders to the broker queue for execution
+    if approved and rds:
+        order_job = row["order_job"]
+        if isinstance(order_job, str):
+            job_payload = order_job
+        else:
+            job_payload = json.dumps(order_job)
+        await rds.rpush(queue_key(QUEUE_BROKER), job_payload)
+
+    result = _row_to_dict(row)
+    result.pop("order_job", None)
+    return result
 
 
 @app.get("/api/admin/trading/lockouts")