close-out 2026-10-30: R-1344 and R-1346 closed, R-1228 switched (D35) and narrowed; R-1352, R-1353 filed; 01/03/05 [DESIGN], total-loss + publish-train runbooks, poster facts; instruction files: the site publishes to Cloudflare Pages

CLAUDE.md

@@ -62,8 +62,9 @@ box**.
   runs two git-syncs: the website from `main`, and `/scripts/` from the tag
   `installer-v<SCRIPT_VERSION>`.
 - **To publish:** cut `installer-v<new SCRIPT_VERSION>`, bump the `--ref` in `webpage.yaml` (**both**
-  the sidecar and the init container), commit, sync.
-- **To roll back:** move the tag back and wait ~30 s. No ArgoCD sync, no deploy — that is the
+  the sidecar and the init container), commit, sync — **and** (since 2026-10-30, D35: felhom.eu is served by Cloudflare
+  Pages) run `sec run CF_PAGES_TOKEN -- scripts/publish-site-cloudflare.sh`, which uploads the tag the manifest names.
+- **To roll back:** move the tag back, then run the same script (~1 min; it re-reads the tag). That is the
   emergency lever; fix forward afterwards.
 - **Do NOT pin the website to the tag**, and the URL never carries a ref — `felhom-bootstrap.sh` and
   the hub's day-0 command follow the tag with no edit.