runner fix

docs/development/repository-workflow.md

@@ -62,6 +62,9 @@ pnpm infrastructure:smoke
 The smoke test verifies PostgreSQL password authentication and authenticated S3 list, put, get,
 head, and delete operations. It also proves invalid database passwords, anonymous object access,
 and invalid S3 signatures are rejected. Its containers, network, and volumes are removed on exit.
+When the smoke script itself runs in a Docker-based CI job, it temporarily joins that job container
+to the isolated Compose network and reaches object storage by its service name. Direct host runs
+continue to use Docker-assigned random ports published only on loopback.
 
 PostgreSQL and the S3 endpoint bind to `127.0.0.1` only. Compose uses persistent named volumes;
 `infrastructure:down` preserves data. The S3 service creates the configured development bucket