chore(testnet): bump backend to v10.2.1, fix deploy workflow

- docker-compose-testnet.yml: 10.0.1.commit.824dc3a5 → 10.2.1.commit.db0a69af
- deploy-config.yml: drop common-blockscout.env from SCP source (file
  doesn't exist in repo — secrets live on VM only). The previous
  workflow has been failing at the SCP step since 2026-03-30 because
  of this missing file reference.

After this push, deploy-testnet job should successfully SCP configs
and run docker compose up to pull v10.2.1 and migrate the DB.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: JOY

.github/workflows/deploy-config.yml

@@ -37,7 +37,6 @@ jobs:
           source: >-
             docker-compose/docker-compose-mainnet.yml,
             docker-compose/Caddyfile-mainnet,
-            docker-compose/envs/common-blockscout.env,
             docker-compose/envs/common-frontend.env,
             docker-compose/envs/common-smart-contract-verifier.env,
             docker-compose/envs/common-visualizer.env
@@ -58,20 +57,13 @@ jobs:
             # Backup current compose
             cp $DEPLOY_PATH/compose.yml $DEPLOY_PATH/compose.yml.bak 2>/dev/null || true
 
-            # Copy new configs (preserve secrets in blockscout env)
+            # Copy new configs (common-blockscout.env stays on VM with real secrets)
             cp $SRC/docker-compose-mainnet.yml $DEPLOY_PATH/compose.yml
             cp $SRC/Caddyfile-mainnet $DEPLOY_PATH/Caddyfile
             cp $SRC/envs/common-frontend.env $DEPLOY_PATH/envs/common-frontend.env
             cp $SRC/envs/common-smart-contract-verifier.env $DEPLOY_PATH/envs/common-smart-contract-verifier.env
             cp $SRC/envs/common-visualizer.env $DEPLOY_PATH/envs/common-visualizer.env
 
-            # For blockscout env: only copy if SECRET_KEY_BASE is not CHANGE_ME
-            if grep -q 'SECRET_KEY_BASE=CHANGE_ME' $SRC/envs/common-blockscout.env; then
-              echo "Skipping common-blockscout.env (contains placeholder secrets)"
-            else
-              cp $SRC/envs/common-blockscout.env $DEPLOY_PATH/envs/common-blockscout.env
-            fi
-
             # Recreate only services with config changes (no downtime)
             cd $DEPLOY_PATH
             sudo docker compose up -d --remove-orphans
@@ -99,7 +91,6 @@ jobs:
           key: ${{ secrets.SSH_PRIVATE_KEY }}
           source: >-
             docker-compose/docker-compose-testnet.yml,
-            docker-compose/envs/common-blockscout.env,
             docker-compose/envs/common-blockscout-testnet.env,
             docker-compose/envs/common-frontend.env,
             docker-compose/envs/common-frontend-testnet.env,
@@ -120,7 +111,6 @@ jobs:
             SRC=/tmp/doscan-deploy
 
             cp $SRC/docker-compose-testnet.yml $DEPLOY_PATH/docker-compose.yml
-            cp $SRC/envs/common-blockscout.env $DEPLOY_PATH/envs/common-blockscout.env
             cp $SRC/envs/common-blockscout-testnet.env $DEPLOY_PATH/envs/common-blockscout-testnet.env
             cp $SRC/envs/common-frontend.env $DEPLOY_PATH/envs/common-frontend.env
             cp $SRC/envs/common-frontend-testnet.env $DEPLOY_PATH/envs/common-frontend-testnet.env

docker-compose/docker-compose-testnet.yml

@@ -82,7 +82,7 @@ services:
       - db
       - redis-db
       - avago
-    image: ghcr.io/dos/doscan:10.0.1.commit.824dc3a5
+    image: ghcr.io/dos/doscan:10.2.1.commit.db0a69af
     pull_policy: always
     restart: always
     stop_grace_period: 5m