diff --git a/apps/web/src/components/knowledge/__tests__/LinkAutocomplete.test.tsx b/apps/web/src/components/knowledge/__tests__/LinkAutocomplete.test.tsx
index f8c65d5..dae1d99 100644
--- a/apps/web/src/components/knowledge/__tests__/LinkAutocomplete.test.tsx
+++ b/apps/web/src/components/knowledge/__tests__/LinkAutocomplete.test.tsx
@@ -466,7 +466,9 @@ describe("LinkAutocomplete", (): void => {
     expect(firstItem).toHaveClass("bg-blue-50");
 
     // Press ArrowDown
-    fireEvent.keyDown(textarea, { key: "ArrowDown" });
+    act(() => {
+      fireEvent.keyDown(textarea, { key: "ArrowDown" });
+    });
 
     // Second item should now be selected
     await waitFor(() => {
@@ -475,7 +477,9 @@ describe("LinkAutocomplete", (): void => {
     });
 
     // Press ArrowUp
-    fireEvent.keyDown(textarea, { key: "ArrowUp" });
+    act(() => {
+      fireEvent.keyDown(textarea, { key: "ArrowUp" });
+    });
 
     // First item should be selected again
     await waitFor(() => {
diff --git a/docker-compose.yml b/docker-compose.yml
index 8350b37..56eddd9 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -368,6 +368,8 @@ services:
       JWT_EXPIRATION: ${JWT_EXPIRATION:-24h}
       # Better Auth
       BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
+      # Encryption (required for federation credentials/private keys)
+      ENCRYPTION_KEY: ${ENCRYPTION_KEY}
       # Ollama (optional)
       OLLAMA_ENDPOINT: ${OLLAMA_ENDPOINT:-http://ollama:11434}
       # OpenBao (optional)
@@ -492,6 +494,7 @@ services:
       NODE_ENV: production
       PORT: ${WEB_PORT:-3000}
       NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-http://localhost:3001}
+      ORCHESTRATOR_API_KEY: ${ORCHESTRATOR_API_KEY}
     ports:
       - "${WEB_PORT:-3000}:${WEB_PORT:-3000}"
     depends_on: