Fix Phase 1 server validation defects

ansible/roles/chromadb/tasks/main.yml

@@ -1,9 +1,14 @@
 ---
 # ChromaDB — vector database for RAG pipelines
-- name: Install ChromaDB in cezen conda env
-  become_user: cezen
-  shell: |
-    /opt/cezen/miniconda/bin/conda run -n cezen pip install chromadb
+- name: Create isolated ChromaDB virtual environment
+  command: /usr/bin/python3 -m venv /opt/cezen/chromadb-venv
+  args:
+    creates: /opt/cezen/chromadb-venv/bin/python
+
+- name: Install pinned ChromaDB in its isolated environment
+  pip:
+    name: chromadb==0.5.23
+    virtualenv: /opt/cezen/chromadb-venv
   retries: 3
   delay: 10
 
@@ -27,13 +32,13 @@
       User=cezen
       Group=cezen
       WorkingDirectory=/opt/cezen/data/chromadb
-      ExecStart=/opt/cezen/miniconda/envs/cezen/bin/chroma run \
+      ExecStart=/opt/cezen/chromadb-venv/bin/chroma run \
         --host 0.0.0.0 \
         --port 8100 \
         --path /opt/cezen/data/chromadb
       Restart=always
       RestartSec=5
-      Environment="PATH=/opt/cezen/miniconda/envs/cezen/bin:/usr/local/bin:/usr/bin:/bin"
+      Environment="PATH=/opt/cezen/chromadb-venv/bin:/usr/local/bin:/usr/bin:/bin"
 
       [Install]
       WantedBy=multi-user.target