docs: define CI/CD and Cloudflare architecture (#35)

[litroc]

Primary issue: #35

Changes

• defines current, transition, and target Docusaurus-to-Cloudflare architecture with explicit trust boundaries and ownership;
• pins the clean-checkout build contract, tool versions, validation commands, artifact contents, deterministic naming/digest, SBOM, provenance, and retention;
• selects immutable Cloudflare Pages Direct Upload, project/branch/preview behavior, environment/secrets inventory, drift detection, and least privilege;
• specifies the exact docs CNAME target, proxy/TTL, custom-domain sequence, Full (strict) TLS, minimum TLS 1.2, HTTPS/canonical-host, IPv4/IPv6, DNSSEC/CAA, and scoped rollback;
• defines stage and quality-gate matrices, protected promotion, non-indexed previews, headers/cache/redirect/robots/sitemap/404 behavior;
• provides external production acceptance, artifact rollback, domain/credential/provider recovery, and an implementation command/configuration matrix for deployment: publish Docusaurus to Cloudflare Pages at docs.l-it.io #40;
• resolves architecture choices while preserving architecture: integrate and obtain approval for the architecture package #38 as the mandatory authorization gate.

Validation

• git diff --check
• npm run lint
• npm run typecheck
• npm run test:content
• npm run build including Pagefind

All checks pass with Node 24.18.0.

Boundaries

• Planning-only; no Cloudflare, DNS, credentials, workflows, dependencies, or production state changed.
• Restricted account/zone/deployment identifiers and secrets remain outside public artifacts.

[cloudflare-workers-and-pages]

Deploying lightning-it-documentation with    Cloudflare Pages

Latest commit:	95f34c1
Status:	✅  Deploy successful!
Preview URL:	https://1fac5de8.lightning-it-documentation.pages.dev
Branch Preview URL:	https://agent-issue-35-cicd-cloudfla.lightning-it-documentation.pages.dev

View logs

[Copilot]

Pull request overview

Defines the planning-only, implementation-ready CI/CD + Cloudflare Pages deployment architecture contract for publishing the Docusaurus site to https://docs.l-it.io, including trust boundaries, immutable artifact promotion, DNS/TLS expectations, acceptance, evidence, and rollback—intended as the handoff for #40 and gated by #38.

Changes:

• Adds a new architecture page describing the end-to-end deployment/promotion model, build contract, Cloudflare Pages contract, DNS/TLS contract, quality gates, acceptance, and rollback.
• Wires the new architecture page into the Docusaurus sidebar navigation.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
sidebars.ts	Adds the new CI/CD + Cloudflare architecture document to the Architecture sidebar section.
docs/architecture/cicd-cloudflare-deployment.md	Introduces the planning/architecture contract for immutable build + Cloudflare Pages deployment, acceptance, evidence, and rollback for docs.l-it.io.

Comments suppressed due to low confidence (1)

docs/architecture/cicd-cloudflare-deployment.md:351

• For consistency with the rest of the repo documentation and with the earlier contract table, the command matrix should use npm ci (without the extra --ignore-scripts=false flag).

| builder             | repository root                 | `npm ci --ignore-scripts=false`                              | lockfile                        | none                       | zero exit, no diff                           | discard workspace                   | install/lock digest           |

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.