Normalize lab docs and keep reusable TNS alias

scenarios/06-rag-vector-classified-docs/RUNBOOK.md

@@ -21,8 +21,8 @@ Show that a RAG agent retrieves only authorized chunks/documents before sending
 1. From the repository root, connect as `ADMIN`:
 
    ```bash
-   cd ~/DEEP-DATA-SECURITY/oracle-deep-data-security-lab
-   export TNS_ADMIN=~/DEEP-DATA-SECURITY/wallet-ddslab
+   cd <repo-root>
+   export TNS_ADMIN=<wallet-directory>
    sql admin@ddslab_tunnel
    ```
 
@@ -30,6 +30,9 @@ Show that a RAG agent retrieves only authorized chunks/documents before sending
 
    SQLcl note: after running a script with `@file.sql`, do not type `/`. The slash reruns the last command in the SQLcl buffer and can make a successful command look like an error.
 
+
+Connection alias note: ddslab_tunnel is the TNS alias configured in the wallet `tnsnames.ora` for this lab. If your wallet uses another alias, replace ddslab_tunnel with your own service alias.
+
 2. Reset the scenario:
 
    ```sql