V10.386 harden Gemini compose defaults

tests/test_docker_compose_runtime_mounts.py

@@ -41,6 +41,16 @@ def test_core_runtime_services_keep_memory_limits_and_healthchecks():
     assert 'curl", "-f", "http://localhost:80/health"' in _service_block(compose, "momo-app")
 
 
+def test_core_runtime_services_pin_gemini_fallback_off_by_default():
+    compose = DOCKER_COMPOSE.read_text(encoding="utf-8")
+    core_services = ("momo-app", "scheduler", "telegram-bot")
+
+    for service_name in core_services:
+        block = _service_block(compose, service_name)
+        assert "- GEMINI_API_HARD_DISABLED=${GEMINI_API_HARD_DISABLED:-true}" in block
+        assert "- GEMINI_FALLBACK_ENABLED=${GEMINI_FALLBACK_ENABLED:-false}" in block
+
+
 def test_optional_compose_services_stay_behind_profiles():
     compose = DOCKER_COMPOSE.read_text(encoding="utf-8")
     expected_profiles = {