tanshu af083415a7 Make the admin's buttons work in a browser ...

Every mutating form now carries the CSRF token as a hidden field, and the
upload route accepts it as a multipart field as well as a header. Driving the
real UI in Firefox found what the header-only tests could not: Create Draft,
Save, Publish, Delete and the up/down buttons all posted without a token and
were rejected. Adds npm run check-site, which verifies a running Site from the
outside and exits non-zero so it can gate a cutover.

2026-09-22 21:32:52 +05:30

..

check-site.ts

Make the admin's buttons work in a browser

2026-09-22 21:32:52 +05:30

provision-site-env.sh

Ship a repair command and a container

2026-09-22 21:24:47 +05:30

seed-dev.ts

Serve the customer-facing menus

2026-09-22 21:18:49 +05:30