Make the first RAG slice executable without risking production data

The Stage 1 foundation now proves provider contracts with mocks and validates PostgreSQL/pgvector ingestion, approval binding, retrieval, reranking, and idempotency using only synthetic data. Live Bailian validation remains gated on rotating the exposed key.

Constraint: The key shown in chat is compromised and cannot be used or committed

Rejected: Mark Stage 1 complete from mock and offline results | real three-model smoke is still required

Confidence: high

Scope-risk: moderate

Reversibility: clean

Directive: Do not enable real-data ingestion until Stage 3 cloud approval and outbound manifest controls are enforced end to end

Tested: make verify; 41 pytest tests; strict mypy; Ruff; Compose config; pinned image build; empty-volume migration; role denial; two idempotent 20-vector seeds; database restart persistence

Not-tested: Live Bailian calls require a newly rotated key; React product UI is not implemented

data/samples/public/README.md

@@ -0,0 +1,9 @@
+# Public synthetic PoC data
+
+本目录数据完全虚构，仅用于验证解析、向量化、入库、检索、重排和指标计算；不对应真实矿区、钻孔、机构或勘查成果。
+
+- `demo_documents.jsonl`：20 条单切片级演示文档；
+- `demo_queries.jsonl`：10 条问题、参考答案和期望文档 ID；
+- 样例初始状态统一为 `LOCAL_PARSED_PENDING_CLOUD_REVIEW`；运行工具必须校验 `source_type=synthetic`，用 UUIDv5 生成数据库身份，实算文本/profile/manifest 哈希，再按固定 `synthetic-demo-v1` 策略完成审批绑定。文件中的普通字段不能直接越过云审批。
+
+这些样例不能用于证明真实地质问答质量；正式评测必须使用取得授权、双人标注并隔离盲测的数据。