handoff pass: vendored sveltia bundle, astro pinned ^7.2.10, root README + refreshed deploy runbook, review fixes (coverless card grid, shared NewsCard/lib, real site origin, nginx security headers, linger step, dead config removed, preview.css sync, tsconfig)

astro.config.mjs

@@ -3,9 +3,9 @@ import { defineConfig } from 'astro/config';
 // Static output (zero runtime) — the whole point of the git-based approach.
 export default defineConfig({
   output: 'static',
-  // Placeholder domain until the real one exists — only used to build absolute
-  // URLs (canonical, og:*, RSS, sitemap). Swap once the portal has a home.
-  site: 'https://portal.ctao.org',
+  // Public origin — used to build absolute URLs (canonical, og:*, RSS,
+  // sitemap). Change when the portal moves to its production domain.
+  site: 'https://astro.isl-dev.grid.cyfronet.pl',
   // Built-in prefetch on every internal link (no per-link attributes needed).
   // Default 'hover' strategy: near-instant navigation without the bandwidth
   // cost of 'viewport' on a 24-card grid; auto-falls back to 'tap' on
@@ -24,13 +24,6 @@ export default defineConfig({
       // Vite blocks unknown Host headers by default; the demo is viewed through an
       // ephemeral cloudflared quick tunnel, so allow any *.trycloudflare.com host.
       allowedHosts: ['.trycloudflare.com'],
-      // Same-origin path for the Sveltia/Decap local backend proxy (default port
-      // moved to 8082 to avoid colliding with Metro on 8081). Proxying it here
-      // means the CMS admin talks to one origin, so editing also works through the
-      // cloudflared tunnel from the phone.
-      proxy: {
-        '/api/v1': { target: 'http://localhost:8082', changeOrigin: true },
-      },
     },
   },
 });