Merge the wilm work, act on the five-agent review, verify the launch-path policy on Windows

docker-compose.airgap.yml

@@ -32,6 +32,10 @@ x-app-env: &app-env
   LOG_LEVEL: ${LOG_LEVEL:-INFO}
   ZABBIX_URL: ${ZABBIX_URL:-}
   ZABBIX_TOKEN: ${ZABBIX_TOKEN:-}
+  # Channel label for a distributable installer. Empty on the stable (main)
+  # bundle, 'DEV' on the edge (dev-be) bundle, which lights up the sidebar
+  # badge. Sourced from .env, which build-channel-installer.ps1 pre-fills.
+  SHOPDB_ENV_LABEL: ${SHOPDB_ENV_LABEL:-}
 
 services:
   db: