Serve public storefront docs at /docs/website, expose api.{domain} hosts for API SSL sync, and require push-then-pull deploys instead of rsync. Co-authored-by: Cursor <cursoragent@cursor.com>