deploy: nginx and git-sync, no image built

Serves loom.hypertheory-labs.dev from the site branch, which holds dist/ and
nothing else. Two public images; git-sync polls the branch and nginx serves the
volume, so publishing a new version is a push and there is no rollout.

This sidesteps the cluster's open gap on publishing container images rather than
closing it. The first workload that genuinely needs an image we built still hits
it, and nothing here is evidence the gap is smaller than it looked.

The HTTPRoute carries no hostname of its own, per public-access.md: it pins to
the loom listener by sectionName and inherits. A route with its own hostnames
stops inheriting and stops being portable between staging and production.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

src/content/docs/index.mdx

@@ -2,6 +2,9 @@
 title: loom
 description: Conventions for holding what a repository knows, so somebody arriving can find it.
 template: splash
+head:
+  - tag: title
+    content: loom — conventions for what a repository knows
 hero:
   tagline: Conventions for holding what a repository knows — so that whoever arrives next, person or agent, can find it.
   actions: