A fresh `make local` now completes the whole flow with no manual seeding, closing
the three S-B04 gaps in the host-browser stack:
- flowable-init also deploys diploma-eligibility.dmn (was BPMN-only), so completing
WachtOpDocumenten routes through the DMN to Beoordelen instead of 404ing.
- a local-seed one-shot seeds + publishes the BIG zaaktype (server-assigned URL) and
writes it to seed-env:/acl.env; the ACL sources it on startup (entrypoint override),
since the UUID isn't knowable at compose-write time.
- an nrc-subscribe one-shot registers the `zaken` abonnement at the event-subscriber
callback, so notifications reach the projection and the openbaar register.
Both one-shots reach OpenZaak/NRC by container IP (a single-label host fails their
Django URLValidator), mirroring the CI verify scripts. Asserted by `make verify-local`.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
notandClaude Opus 4.8
a940a6c9ce