deploy(intranet): roll content quality image

Image built from current DM master (network/BT command plane + Blue Jay
UI.Components restyle) and imported on rke2-server + rke2-agent1.
Deployment stays parked at replicas: 0 — gap 1 is wider than previously
noted (the fc-mysql Operator deployment itself is absent, so instance
CRDs would not reconcile) and gap 2 (1P runtime item) is still open.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

apps/fc-devicemgmt/deployment-web.yaml

@@ -17,9 +17,15 @@
 #      mtls-chain.pem) — see apps/fc-devicemgmt/1password-item.yaml. Mint mTLS
 #      from step-ca-agent ClusterIssuer per ADR-126; DB-Password must match the
 #      password configured for the MySQL user.
-# Re-enable: change replicas back to 2 after both gaps close. The image tag
-# in this file (v20260512-cx5) MAY also need a refresh — it predates the
-# Sprint 34 Cl-3 operator fix; Web may have an analogous bug.
+# Re-enable: change replicas back to 2 after both gaps close.
+#
+# 2026-06-10 morning-routine refresh: image tag bumped to v20260610-bluejay —
+# built from master @ 1614fce (June 9 network/BT command plane PRs #30/#33/#34,
+# Shared.Data 1.0.1, and the Blue Jay UI.Components restyle). Imported on
+# rke2-server + rke2-agent1. Gap 1 is wider than noted above: the fc-mysql
+# OPERATOR deployment itself is absent from the cluster (only mysql-web runs),
+# so MySqlInstanceCrds would not reconcile — deploy the operator first.
+# Gap 2 (1P runtime item) also remains open; replicas stays 0.
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -64,7 +70,7 @@ spec:
         fsGroupChangePolicy: OnRootMismatch
       containers:
         - name: web
-          image: localhost/fc-devicemgmt-web:v20260512-cx5
+          image: localhost/fc-devicemgmt-web:v20260610-bluejay
           imagePullPolicy: Never
           ports:
             - name: http

apps/intranet/intranet.yaml

@@ -46,7 +46,7 @@ spec:
     spec:
       containers:
         - name: intranet-web
-          image: localhost/fc-intranet-web:v20260531-ttsreader-bridge
+          image: localhost/fc-intranet-web:v20260611-content-quality
           imagePullPolicy: Never
           ports:
             - containerPort: 5300
@@ -60,7 +60,12 @@ spec:
             # ≈ 9 hours. BLUEJAY-WS GPU (R9700, 32GB VRAM) does the same work
             # in minutes. Memory: feedback_pi5_nomic_embed_slow.
             - name: IntranetSearch__OllamaBaseUrl
-              value: "http://10.0.56.20:11434"
+              value: "http://edge1.iamworkin.lan:11434"
+            # External Notes corpus roots are not mounted in the live pod today.
+            # Keep the curated/workflow docs directory active without logging
+            # repeated /srv/flowercore-notes missing-root warnings.
+            - name: IntranetSearch__Enabled
+              value: "false"
             # Sprint E Phase 2α — JSON-file-backed PageReadingOverride persistence
             # on the writable PVC at /data. Without this env var the
             # intranet falls back to the in-memory store (loses state on