fix(web,api): fix orchestrator proxy 502 connectivity (#542)

Co-authored-by: Jason Woltje <jason@diversecanvas.com>
Co-committed-by: Jason Woltje <jason@diversecanvas.com>

docker-compose.yml

@@ -433,6 +433,8 @@ services:
       NODE_ENV: production
       # Orchestrator Configuration
       ORCHESTRATOR_PORT: 3001
+      # Bind to all interfaces so the web container can reach it over Docker networking
+      HOST: 0.0.0.0
       AI_PROVIDER: ${AI_PROVIDER:-ollama}
       # Valkey
       VALKEY_URL: redis://valkey:6379
@@ -448,6 +450,8 @@ services:
       # Security
       KILLSWITCH_ENABLED: true
       SANDBOX_ENABLED: true
+      # API key for authenticating requests from the web proxy
+      ORCHESTRATOR_API_KEY: ${ORCHESTRATOR_API_KEY}
     ports:
       - "3002:3001"
     volumes:
@@ -498,6 +502,8 @@ services:
       NODE_ENV: production
       PORT: ${WEB_PORT:-3000}
       NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost:3001}
+      # Server-side orchestrator proxy (API routes forward to orchestrator service)
+      ORCHESTRATOR_URL: http://orchestrator:3001
       ORCHESTRATOR_API_KEY: ${ORCHESTRATOR_API_KEY}
     ports:
       - "${WEB_PORT:-3000}:${WEB_PORT:-3000}"
@@ -515,6 +521,7 @@ services:
       retries: 3
       start_period: 40s
     networks:
+      - mosaic-internal
       - mosaic-public
     labels:
       - "com.mosaic.service=web"