D3 Part 4: docs — .tag/.badge addendum, website CHANGELOG, REPORT

- design-system.md: the .tag (outline+dot, state) vs .badge (filled
  chip, static informational label) distinction the D1 unified view
  left implicit, + a Website (TASK-D3) section (shared site.css,
  self-hosted fonts, external sprite, mask-based CSS marks, ?v=
  cache-busting, site_gates.py enforcement).
- website/CHANGELOG.md created (newest-on-top) with the D3 entry.
- REPORT.md overwritten per §15 (baselines, commits, gate outputs +
  all three red-proofs, 84-problem/182-emoji baseline → 0, contact-form
  freeze proof + live TESZT submission resend id, live checks, the
  narrow-viewport limitation, observations).

website/CHANGELOG.md

@@ -0,0 +1,26 @@
+# website/ changelog (newest on top)
+
+## 2026-07-02 — TASK-D3: design system v2 re-skin (content-preserving)
+
+All seven pages re-skinned to the v2 language (`documentation/design/design-system.md`); URLs,
+copy, meta/SEO, analytics, and the contact form's functional markup unchanged.
+
+- **One stylesheet:** the seven near-identical embedded `<style>` blocks (≈120 KB combined)
+  extracted into `assets/site.css?v=1` — vendored `@font-face`, the v2 `:root` tokens, a deduped
+  shared base, and per-page sections scoped by `page-<name>` body classes. Zero `<style>` blocks
+  remain.
+- **Self-hosted fonts:** Plus Jakarta Sans + JetBrains Mono (variable woff2, latin+latin-ext,
+  copied byte-identical from felhom-controller) served from `/assets/fonts/` — the Google Fonts
+  CDN (a GDPR exposure for a data-sovereignty product) is gone, preconnect hints included.
+- **Icons:** all 182 emoji replaced by a 70-symbol external Lucide sprite
+  (`/assets/icons.svg?v=1#i-name`): feature tiles as `.ico-tile` 48px bg-2 squares, heading icons
+  `.ico-lg`, inline `.ico`; the alkalmazasok "Open Source" green checkmark image → sprite check
+  (`.ico-yes`, blue). CSS-generated ✓/✗/★ content → currentColor mask marks / plain text.
+- **Nav/footer normalized** across all seven pages (index's `#szolgaltatasok` →
+  `/#szolgaltatasok`); byte-identical after the active-marker strip.
+- **Visual v2:** navy tokens, single 2px radius, no shadows/gradients/hover-lifts, two-tone
+  heading kept as solid `--blue-bright`, `prefers-reduced-motion` respected.
+- **Gates:** `scripts/site_gates.py` (BOM ×7, emoji, nav/footer, analytics, no-CDN, banned
+  tokens, style-blocks, `?v=` cache-busting) — baseline 84 problems + 182 emoji → **all green**.
+- kapcsolat: form fields/JS/endpoint byte-identical; live TESZT submission accepted
+  (contact-mailer `[OK] Email sent`, resend id logged).