phase 15: helm deployment complete, runbook, trino/superset fixes

.kiro/specs/stonks-oracle/tasks.md

@@ -113,7 +113,7 @@
 - [x] Create replay dataset from archived documents for deterministic extraction testing
 - [x] Create integration tests for the full ingest-to-recommendation flow
 - [x] Create paper trading simulation scenarios
-- [x] Validate fail-closed behavior for broker outages and ambiguous order states
+- [x] Vnmalidate fail-closed behavior for broker outages and ambiguous order states
 - [x] Validate lake publication and Trino query correctness over partitioned MinIO datasets
 - [x] ~~Run shadow mode~~ moved to Phase 15.5 (post-deployment)
 - [x] ~~Prepare operator runbook~~ moved to Phase 15.5 (post-deployment)
@@ -136,7 +136,7 @@
   - _Requirements: N1_
 
 ## Phase 15 - CI Validation, Helm Deployment, and Cluster Rollout
-- [-] 15. Commit, push, validate CI, create Helm chart, and deploy to cluster
+- [x] 15. Commit, push, validate CI, create Helm chart, and deploy to cluster
 - [x] 15.1 Commit and push code to GitHub
   - Configure git with SSH key for the private repo
   - Commit all current changes with message `phase 14-15: docker build validation and helm deployment`
@@ -146,7 +146,7 @@
   - Monitor the GitHub Actions run to confirm lint-and-test and build-services jobs succeed
   - Fix any CI failures and re-push if needed
   - _Requirements: N1_
-- [-] 15.3 Create Helm chart for stonks-oracle deployment
+- [x] 15.3 Create Helm chart for stonks-oracle deployment
   - Create `infra/helm/stonks-oracle/Chart.yaml` with chart metadata
   - Create `infra/helm/stonks-oracle/values.yaml` with configurable image tags, replica counts, resource limits, and environment references
   - Create Helm templates for all deployments, services, configmap, secrets, ingress, and network policies from existing K8s manifests
@@ -157,17 +157,17 @@
   - Create a `docker-registry` secret in the `stonks-oracle` namespace with GHCR credentials (using a GitHub PAT or deploy key)
   - Reference the imagePullSecret in all deployment specs via the Helm values
   - _Requirements: 8.2, N1_
-- [-] 15.5 Deploy stonks-oracle to the cluster via Helm
+- [x] 15.5 Deploy stonks-oracle to the cluster via Helm
   - Run `helm install` or `helm upgrade --install` targeting the `stonks-oracle` namespace
   - Verify all pods reach Running/Ready state
   - Verify services and ingress endpoints are reachable
   - Debug and fix any deployment issues (CrashLoopBackOff, image pull errors, config mismatches)
   - _Requirements: N1, 12.1_
-- [ ] 15.6 Run shadow mode before enabling any live execution
+- [x] 15.6 Run shadow mode before enabling any live execution
   - Confirm all services are running and processing in paper-only mode
   - Validate end-to-end data flow from ingestion through recommendation without live trades
   - _Requirements: N5, 8.1_
-- [ ] 15.7 Prepare operator runbook and incident response procedures
+- [x] 15.7 Prepare operator runbook and incident response procedures
   - Document service restart procedures, log access, and common failure modes
   - Document how to toggle trading modes and approve live execution
   - _Requirements: 8.2, 12.1_