feat: run smoke checks after deploy

docs/DEPLOYMENT.md

@@ -83,13 +83,15 @@ verify the API and web health checks after a rollback.
 Run the post-deploy smoke check against the public endpoints:
 
 ```sh
-API_HEALTH_URL=http://localhost:3000/health \
 WEB_BASE_URL=http://localhost:8080 \
 ./scripts/smoke-production.sh
 ```
 
 The check performs read-only requests against API health, the web health path,
-and public search. It exits nonzero on the first failed request.
+and public search. Without `API_HEALTH_URL`, the API check runs inside the
+Compose API container, which is appropriate because the production API port is
+not exposed publicly. It exits nonzero on the first failed request. Both deploy
+and rollback scripts run this check after changing application services.
 
 ## Health Checks