All three btcpay members read btcpay-db-password via secret_env, but no
manifest declared it, so only the legacy stacks.rs installer ever
created it. An orchestrator install or reconcile on a node that never
ran that path failed with "required secret 'btcpay-db-password' is
missing".
Declare it (hex32) on each member. Generation is idempotent: a node with
an existing readable password keeps it, so running btcpay databases are
unaffected.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ssmithxandClaude Opus 5.5
b7a20c4ed8