[repo-truth] reconcile stale operational docs

[i-xtsu-sixyou-ken-mei]

Stale claim

docs/architecture/current.md still says production Supabase migrations are manual operator actions after merge, including an explicit db push --dry-run / operator db push sequence.

Canonical evidence

Current .github/workflows/ci.yml owns production migration application through deploy-supabase-migrations on non-PR runs. The job:

• runs in the production environment;
• serializes under supabase-production-migrations;
• links the production project;
• runs supabase db push --dry-run;
• runs supabase db push;
• verifies no migrations remain pending;
• is a dependency of deploy-fly, so Fly deployment waits for migrations.

This is repository-defined behavior; no production-only state is inferred.

Outcome

Update — change only the architecture ownership wording so production migration apply/verify belongs to the CI migration job rather than a manual laptop/operator path. Keep supabase/migrations/ as migration-history source of truth and do not duplicate pooler/credential mechanics.

Why this is not speculation

The old architecture text directly contradicts the checked-in CI workflow. The correction describes only behavior encoded in ci.yml and does not add policy beyond that workflow.

Other reviewed candidates

• fix: default analytics views to 1M and surface daily suggestion failures #411 analytics defaults / Sentry capture — No change. Current change is application/runtime behavior; no conflicting active operational docs found in the affected analytics area.
• fix(control-center): align Growth with shared social release schedule #412 Growth shared social schedule — No change. It aligns UI to the existing canonical SOCIAL_RELEASE_SLOTS / daily-cap contract rather than changing that contract.
• fix(podcast): reject explicit cross-subject image collisions #413 cross-subject image collision guard — No change. Scoped podcast instructions remain compatible: generic candidates remain eligible and only explicit contradiction against another known subject is rejected.
• refactor(podcast): unify OpenRouter model fallbacks and remove NVIDIA LLM paths #414 unified OpenRouter fallbacks — No change. The implementing change removed the retired model/provider env surface and aligned the affected podcast docs/config; no separate stale operational claim was found worth duplicating.
• Refactor/huge simplify #415 large simplification — No change. Reviewed as a broad implementation refactor; no additional high-confidence docs drift was established from repository evidence.
• [test-qa-hourly] fix: build distribution snapshot runtime types #420 Distribution Snapshot runtime-types preflight — No change. Workflow bootstrap fix only; no operator/runbook contract changed.
• Codex/waitlist demand integration #421 attributed waitlist demand integration — No change. The implementing change added a dedicated waitlist acquisition contract plus the account-engine AGENTS.md exception. Landing remains static, account-engine owns the bounded public persistence route, and Control Center reads demand evidence. No second copy of those details is added here.
• Open fix(control-center): make Growth language-first #416 / fix: harden pipeline and ops transient failure recovery #417 — No change. Not merged, therefore not current main repository truth.

Scope

Docs-only: docs/architecture/current.md, 3 additions / 3 deletions. No implementation, tests, workflows, migrations, config, CI/security/coverage/dead-code/duplicate gates, or secrets changed.