Merge branch 'chore/handoff-pushed'

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/HANDOFF.md

@@ -4,30 +4,24 @@ Where development stopped, and how to pick it up. Delete or rewrite this file wh
 
 ## State
 
-- **Spec 001 is merged into `main` locally** (merge commit `f26e443`, on the owner's go-ahead 2026-11-10). `main` is
-  **not pushed**: `origin/main` is still `3cecab4`. Ask before pushing.
-- **Branch `fix/review-follow-ups`** (3 commits on top of `main`, not merged): the three parked final-review
-  findings plus one Next item.
-  - `47aae62` Ghost HTML sanitizer rebuilt as an allowlist on Bun's `HTMLRewriter`, moved to `src/site/post-html.ts`
-    (see `docs/DECISIONS.md`, 2026-11-10).
-  - `067423f` the start page's "N hidden" note counts each entry once (`data-entry`); issue cover lines follow the AI filter.
-  - `23fd347` the start page's work half gets the same "N hidden · show all" note.
-  Merge it to `main` when the owner approves.
+- **Spec 001 and the review follow-ups are merged into `main` and pushed to Gitea** (2026-11-10, owner-approved).
+  Follow-ups: Ghost HTML sanitizer rebuilt as an allowlist on Bun's `HTMLRewriter` in `src/site/post-html.ts`
+  (`docs/DECISIONS.md`, 2026-11-10); hidden-count notes count each entry once; issue cover lines follow the AI
+  filter; the start page's work half notes what the filter hides.
 - **Not deployed.** The owner wires the homelab config repo, OpenBao secrets and DNS himself (`docs/DEPLOY.md`).
 - **Content repo** `portfolio-next-content` (`~/portfolio-next-content`, pushed, head `a895087`): 13 old projects with
   screenshots; AU projects, "this site" and three Bluesky comic shares are `draft: true`.
-- **Verified on `fix/review-follow-ups`:** `bun run typecheck` clean, `bun test` 156 pass, `bunx playwright test`
+- **Verified on `main`:** `bun run typecheck` clean, `bun test` 156 pass, `bunx playwright test`
   130 pass / 8 skipped, `docker build` + `scripts/smoke-test.sh` ok.
 
 ## Next steps
 
-1. Owner: merge `fix/review-follow-ups`, then push `main` when ready.
-2. Owner works through `docs/TODO.md` → "Before go-live (owner)": real project dates, years, `intro` and
+1. Owner works through `docs/TODO.md` → "Before go-live (owner)": real project dates, years, `intro` and
    `personal_intro`, AU projects' AI levels and un-drafting, comic images, Junkwraith quote check, CV PDF,
    Ghost/Trakt/Hardcover keys (and a public Trakt profile), DNS cutover, the blog-redirect decision.
-3. First live build with real keys: check `/status` → `sources`. The Ghost, Trakt and Hardcover modules
+2. First live build with real keys: check `/status` → `sources`. The Ghost, Trakt and Hardcover modules
    (`src/sources/`) have never run against the live APIs. `HARDCOVER_QUERY` is the most likely to need fixing.
-4. Agent-doable backlog: `docs/TODO.md` → "Next" and "Review follow-ups".
+3. Agent-doable backlog: `docs/TODO.md` → "Next" and "Review follow-ups".
 
 ## Where things are