ingestion: report per-platform added/updated correctly; qdrant compose subnet

deploy/qdrant.yml

@@ -51,5 +51,16 @@ services:
       retries: 3
       start_period: 10s
 
+# The host's docker daemon has every default address pool allocated by other
+# projects, so an implicit compose network cannot be created here. Pin a /28 of
+# RFC1918 space that no other bridge uses; it is separate from the site's
+# 10.89.0.0/28 so stopping one project cannot disturb the other.
+networks:
+  default:
+    ipam:
+      config:
+        - subnet: 10.89.0.16/28
+          gateway: 10.89.0.17
+
 volumes:
   qdrant_storage: