Pass the ambient boolean as one flag argument

Go flag parsing stops at the separate boolean value before ambient-token. Use -ambient-enabled=value and pin the deployed argv contract discovered during live V-691 verification. Owner explicitly requested direct commits to master.

internal/config/deployconfig_test.go

@@ -108,3 +108,23 @@ func TestCanonicalDeployEnvExampleNamesEverySecret(t *testing.T) {
 		}
 	}
 }
+
+// Go's flag package treats a bare boolean flag as true and does not consume a
+// following "true"/"false" argument. That following value becomes the first
+// positional argument and stops parsing, so every flag after it silently keeps
+// its default. Keep the Compose boolean in -name=value form (V-691 live QA).
+func TestComposeAmbientBooleanDoesNotStopFlagParsing(t *testing.T) {
+	path := filepath.Join("..", "..", "docker-compose.yml")
+	b, err := os.ReadFile(path)
+	if err != nil {
+		t.Fatalf("read %s: %v", path, err)
+	}
+	compose := string(b)
+	const joined = `"-ambient-enabled=${MAVEN_AMBIENT_ENABLED:-false}"`
+	if !strings.Contains(compose, joined) {
+		t.Fatalf("mavweb ambient boolean must be one argv element %s", joined)
+	}
+	if strings.Contains(compose, `"-ambient-enabled",`) {
+		t.Fatal("bare -ambient-enabled leaves its value positional and prevents -ambient-token from being parsed")
+	}
+}