Add website API docs, SSL api-hosts, and git-only deploy workflow.

Serve public storefront docs at /docs/website, expose api.{domain} hosts for API SSL sync, and require push-then-pull deploys instead of rsync.

Co-authored-by: Cursor <cursoragent@cursor.com>

src/internal-ssl/internal-ssl.module.ts

@@ -0,0 +1,10 @@
+import { Module } from '@nestjs/common';
+import { InternalSslController } from './internal-ssl.controller';
+import { InternalSslService } from './internal-ssl.service';
+import { SslSyncTokenGuard } from './ssl-sync-token.guard';
+
+@Module({
+  controllers: [InternalSslController],
+  providers: [InternalSslService, SslSyncTokenGuard],
+})
+export class InternalSslModule {}