fix(deploy): forward MODULES_ENTITLED into the server container (default parking,validation)

The Komodo stack env alone is compose interpolation input; only variables in the
service's environment: block reach the container. Without it every booth on 55d6242
had Car Wash entitled (unset = every module).

Claude-Session: https://claude.ai/code/session_01FWncR69HgGPuei1dLrW3cU

wiki/decisions/venue-modules.md

@@ -348,6 +348,13 @@ at the two seams the design names, and the registry earned its keep: **one manif
 - **Modules reach the core only via `ServerModuleDeps`** (db, eventLog, payStation,
   shiftService) — no module imports another; `dependsOn: ["parking", "validation"]` is enforced
   by the activation rules (verified: carwash cannot be on with validation off).
+- **Deploy gotcha (2026-09-06):** `MODULES_ENTITLED` reaches the container ONLY through
+  `docker-compose.yml`'s `environment:` block — a value in the Komodo stack env alone is just
+  compose interpolation input. It was missing there, so every booth on `55d6242` had Car Wash
+  on (unset = everything). Fixed: compose forwards it with a default of `parking,validation`;
+  a booth is never entitled to a module its stack env does not name. Check on the box:
+  `docker exec <stack>-server-1 env | grep MODULES_ENTITLED` and the boot log line
+  `venue modules (entitled = …; effective = …)`.
 - **Web:** `/wash` (the desk: ticket lookup → category/service/price → order, the site's
   booth|bay policy shown read-only;
   the queue oldest-first with Done / Paid cash / Paid card / Void) and `/setup/carwash`