prod: sync production fixes - agent lifecycle, docker fallback, compose hardening

docker/docker-compose.yml

@@ -121,6 +121,13 @@ services:
       GATEWAY_REQUEST_TIMEOUT_SECS: "120"
       GATEWAY_MAX_TOOL_ITERATIONS: "10"
       LOG_LEVEL: "info"
+      # Agent containers are created on the same bridge network as the DB/gateway
+      # so they can reach goclaw-db by hostname. Docker Compose prefixes the
+      # project name, so the network is "goclaw_goclaw-net" on production.
+      AGENT_NETWORK: "${AGENT_NETWORK:-goclaw_goclaw-net}"
+      # Explicit DB URL for agent containers using the container name (not the
+      # short "db" alias which is only resolvable inside the compose network).
+      AGENT_DB_URL: "${AGENT_DB_URL:-}"
     depends_on:
       db:
         condition: service_healthy