Merge branch 'chore/dns-cutover-done': DNS cutover ticked off

docs/TODO.md

@@ -13,7 +13,7 @@ Small, specific, independently actionable. Remove only when actually done.
 - [ ] Add the comic images (`media/`) and the CV PDF (`site.links.cv`, a filename under `media/`).
 - [ ] Verify the Ghost, Trakt and Hardcover modules against the live services once keys exist. They were written from documented field names, never run live (`src/sources/ghost.ts`, `trakt.ts`, `hardcover.ts`). Expect `/status` to name any that fail; the site still builds.
 - [ ] Make the Trakt profile public (the build uses no OAuth). If it must stay private, add OAuth in `src/sources/trakt.ts`.
-- [ ] DNS cutover and the 2021 site's move to `old.lucaswinther.info`, per `docs/DEPLOY.md`.
+- [x] DNS cutover and the 2021 site's move to `old.lucaswinther.info`, per `docs/DEPLOY.md` (done 2026-11-10: the config repo's `portfolio` stack serves the 2021 site there).
 - [ ] Redirect the old blog URLs (`blog.lucaswinther.info/<slug>/`) to `/work/writing/<slug>/` (DEPLOY step 7), and decide what stays on the blog host. Post pages link "Read it on the blog →" to the Ghost URL, so that link must change or stop redirecting once the blog redirects.
 - [ ] Old report links (`lucaswinther.info/documents/<name>.pdf`, e.g. from a CV or LinkedIn) break at the DNS cutover: the reports now live at `/media/reports/` (lowercase names) and in the archive at `old.lucaswinther.info/documents/`. Redirect one way or the other if anything still points there.
 - [ ] Check the gate palette against the approved `mockups/nav-d.html` once more on the live site (left gate light, work dark: kept on purpose, owner to confirm).