D35/R-1228: publish-site-cloudflare.sh (dry run, refusals); the contact form posts to api.felhom.eu

scripts/CHANGELOG.md

@@ -1,3 +1,10 @@
+## 2026-10-30 — `publish-site-cloudflare.sh`: the website and the installer to Cloudflare Pages (D35 / R-1228)
+
+- Stages `website/` from `origin/main` and `scripts/` from the installer tag named in `manifests/webpage.yaml`; REFUSES
+  when the staged installer is not the tag's byte for byte, when a must-have page is missing, when the manifest names
+  more than one tag, or when a file is over Pages' 25 MiB; `--dry-run` uploads nothing. The upload is wrangler 3.80.0 in
+  `node:20.17.0-alpine`; the token (`sec run CF_PAGES_TOKEN`) reaches it as an environment variable name only.
+
 ## 2026-10-28 (midday) — the watch asks Docker Hub gently: spaced, retried on 429, tag lists cached 24 h (R-1334)
 
 - **`security_watch.py`:** Docker Hub requests (`hub.docker.com`, `registry-1.docker.io`, `auth.docker.io`) go through