Fix code review issues: kustomization, memory limits, dev key comment

- Add servicemonitor.yaml to kustomization.yaml resources list
- Increase store-worker memory requests/limits (64Mi/128Mi → 128Mi/256Mi)
- Add comment clarifying Azurite dev key is not a real secret
- Update journal with wrap-up fixes

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: johnmathews

docker-compose.yml

@@ -55,6 +55,8 @@ services:
       - PYTHONPATH=/app/src
       - REDIS_URL=redis://redis:6379
       - DATABASE_URL=postgresql://documentstream:documentstream@postgres:5432/documentstream
+      # Azurite default dev key — NOT a real secret, publicly documented at
+      # https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azurite
       - BLOB_CONNECTION_STRING=DefaultEndpointsProtocol=http;AccountName=devstoreaccount1;AccountKey=Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw==;BlobEndpoint=http://azurite:10000/devstoreaccount1;
       - BLOB_CONTAINER=documents
     depends_on:

journal/260401-azure-blob-storage-and-metrics.md

@@ -93,6 +93,15 @@ to the Grafana dashboard, completing the storage layer of the pipeline.
 - ONNX Runtime is ~50MB vs ~5GB for full PyTorch — faster image pulls, faster KEDA scale-up,
   lower memory per classify-worker pod
 
+### Wrap-up Fixes (code review)
+
+- Added `servicemonitor.yaml` to `k8s/base/kustomization.yaml` — it was missing, so
+  `kubectl apply -k k8s/base/` would silently skip it
+- Increased store-worker memory limits from 64Mi/128Mi to 128Mi/256Mi — Python with
+  psycopg, azure-storage-blob, and prometheus_client exceeds 64Mi
+- Added comment on Azurite dev key in docker-compose.yml to prevent false positives
+  from secret scanners
+
 ## Test Status
 
-- 92 tests passing (up from 83), lint clean
+- 92 tests passing (up from 83), 88% coverage, lint clean

k8s/base/kustomization.yaml

@@ -12,6 +12,7 @@ resources:
   - configmap.yaml
   - gateway-deployment.yaml
   - gateway-service.yaml
+  - servicemonitor.yaml
   - extract-deployment.yaml
   - classify-deployment.yaml
   - store-deployment.yaml

k8s/base/store-deployment.yaml

@@ -40,7 +40,7 @@ spec:
           resources:
             requests:
               cpu: 50m
-              memory: 64Mi
+              memory: 128Mi
             limits:
               cpu: 200m
-              memory: 128Mi
+              memory: 256Mi