feat(qdrant): Migrate to hosted qdrant-dev.breakpilot.ai with API-Key auth

- LegalRAGClient: QDRANT_HOST+PORT → QDRANT_URL + QDRANT_API_KEY
- docker-compose: env vars updated for hosted Qdrant
- AllowedCollections: added bp_compliance_gdpr, bp_dsfa_templates, bp_dsfa_risks
- Migration scripts (bash + python) for data transfer

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ai-compliance-sdk/internal/ucca/legal_rag.go

@@ -14,8 +14,8 @@ import (
 
 // LegalRAGClient provides access to the compliance CE vector search via Qdrant + Ollama bge-m3.
 type LegalRAGClient struct {
-	qdrantHost     string
-	qdrantPort     string
+	qdrantURL      string
+	qdrantAPIKey   string
 	ollamaURL      string
 	embeddingModel string
 	collection     string
@@ -56,15 +56,14 @@ type CERegulationInfo struct {
 
 // NewLegalRAGClient creates a new Legal RAG client using Ollama bge-m3 embeddings.
 func NewLegalRAGClient() *LegalRAGClient {
-	qdrantHost := os.Getenv("QDRANT_HOST")
-	if qdrantHost == "" {
-		qdrantHost = "localhost"
+	qdrantURL := os.Getenv("QDRANT_URL")
+	if qdrantURL == "" {
+		qdrantURL = "http://localhost:6333"
 	}
+	// Strip trailing slash
+	qdrantURL = strings.TrimRight(qdrantURL, "/")
 
-	qdrantPort := os.Getenv("QDRANT_PORT")
-	if qdrantPort == "" {
-		qdrantPort = "6333"
-	}
+	qdrantAPIKey := os.Getenv("QDRANT_API_KEY")
 
 	ollamaURL := os.Getenv("OLLAMA_URL")
 	if ollamaURL == "" {
@@ -72,8 +71,8 @@ func NewLegalRAGClient() *LegalRAGClient {
 	}
 
 	return &LegalRAGClient{
-		qdrantHost:     qdrantHost,
-		qdrantPort:     qdrantPort,
+		qdrantURL:      qdrantURL,
+		qdrantAPIKey:   qdrantAPIKey,
 		ollamaURL:      ollamaURL,
 		embeddingModel: "bge-m3",
 		collection:     "bp_compliance_ce",
@@ -220,12 +219,15 @@ func (c *LegalRAGClient) searchInternal(ctx context.Context, collection string,
 	}
 
 	// Call Qdrant
-	url := fmt.Sprintf("http://%s:%s/collections/%s/points/search", c.qdrantHost, c.qdrantPort, collection)
+	url := fmt.Sprintf("%s/collections/%s/points/search", c.qdrantURL, collection)
 	req, err := http.NewRequestWithContext(ctx, "POST", url, bytes.NewReader(jsonBody))
 	if err != nil {
 		return nil, fmt.Errorf("failed to create search request: %w", err)
 	}
 	req.Header.Set("Content-Type", "application/json")
+	if c.qdrantAPIKey != "" {
+		req.Header.Set("api-key", c.qdrantAPIKey)
+	}
 
 	resp, err := c.httpClient.Do(req)
 	if err != nil {