stage the static public rebuild dossier

[deucebucket]

What changed

• adds an accessible, responsive, game-specific static dossier under site/
• adds dated public status, devlog, roadmap, proof-method, and static JSON snapshot pages
• documents the GitHub Pages project-site architecture and strict publication boundary
• adds a pinned-action Pages workflow that validates PRs but deploys only after merge
• adds fail-closed link, action-pin, snapshot-integrity, symlink, file-type, and negative-exposure checks

Why

BucketComps needs one public repository per game for its themed static devlog and dossier, while the dynamic live program remains a separately hosted, sanitized local service.

Boundary

This branch was authored only from the already sanitized public release 20260723-ee63eaa984f6aee96265. It contains no game asset, media, ROM data, key, raw runtime payload, private wiki/source copy, credential, internal path, or custom-domain file. The proposed live link is explicitly labeled not cut over.

Validation

• python3 scripts/check_site.py
• git diff --check
• repository-wide negative-exposure regex scan
• no-symlink and exact public-file inventory checks
• headless Chromium layout checks at 1440, 900, 390, and 320 px across status/devlog/method/roadmap pages; no horizontal overflow or clipped link/button targets

Pages remains a merge gate: this draft PR does not deploy or change DNS.