fix(model selection): bake dotfiles models.json (both glm models, env-ref key) over frozen worker list; catalog prefers baked file — was offering models the container registry couldn't resolve

docker/control.Dockerfile

@@ -24,7 +24,7 @@ RUN rm -f /usr/local/bin/npm \
 # Same pi config as workers (dotfiles, filtered; git: packages stripped).
 COPY docker/pi-agent/ /root/.pi/agent/
 COPY plugin/lvmh-agent.ts /root/.pi/agent/extensions/lvmh-agent.ts
-COPY docker/worker-models.json /root/.pi/agent/models.json
+COPY docker/worker-models.json /root/.pi/agent/models.json.fallback
 
 # Ops instructions live in the workspace (AGENTS.md is auto-loaded from cwd).
 COPY docker/ops-context/AGENTS.md /ops-seed/AGENTS.md

docker/worker.Dockerfile

@@ -25,15 +25,16 @@ RUN rm -f /usr/local/bin/npm \
 	&& mv /usr/local/bin/npm-ignore-scripts /usr/local/bin/npm \
 	&& chmod +x /usr/local/bin/npm-real /usr/local/bin/npm
 
+COPY docker/worker-models.json /root/.pi/agent/models.json.fallback
 # User's pi config from dotfiles (settings, skills, agents, extensions,
 # APPEND_SYSTEM.md) — synced by deploy.sh from ~/.dotfiles/pi/agent (filtered:
 # no auth.json/sessions/cache/npm). If docker/pi-agent/ is absent this layer
 # is skipped (mkdir keeps later COPY targets valid).
 COPY docker/pi-agent/ /root/.pi/agent/
 
-# lvmh overlays: dial-home plugin + env-ref models.json win over dotfiles copies.
+# lvmh overlays: dial-home plugin; models.json comes from dotfiles (baked
+# by rsync-pi-agent.sh; the .fallback above covers a dotfiles-less bake).
 COPY plugin/lvmh-agent.ts /root/.pi/agent/extensions/lvmh-agent.ts
-COPY docker/worker-models.json /root/.pi/agent/models.json
 COPY docker/bridge /bridge
 
 # Per-session pi sessions persist here (volume lvmh-sessions); package cache