Bring the docs site to the 2plot network standard (0.1.1)

[pip-install-python]

Retrofit against the satellite blueprint (STANDARD.md), proven on the boilerplate, leaflet and email hosts:

• Identity: SITE_BRAND "dash-mui-scheduler — MUI X scheduling for Dash" on every surface (Dash title, /llms.txt H1, index.html, manifest, README); image_url= + description= at every register_page; app manifest added.
• Social card: 1200x630 CDN card (cdn.2plot.ai/github_assets/ muischeduler.2plot.dev.png — uploaded and verified 200 + IHDR before this commit); scripts/make_social_card.py renders it from assets/dms_logo.svg.
• One short app id muischeduler everywhere: traffic_report.app_key(), ad_client.APP_ID, bulletin.app_id(), render.yaml SATELLITE_APP_KEY.
• Internal-traffic contract: write-time UA drops (case-insensitive) in the tracker; every outbound call sends internal_ua(); /healthz never a visit.
• /healthz with ok:true on flask too (lib/health.py); payload names the app.
• lib/bulletin.py wired via NETWORK_BULLETIN_URL; lib/network_directory.py publishes the cross-host directory (## Network in /llms.txt).
• Dependencies: dash-improve-my-llms[flask,fastapi]>=2.3.4 from PyPI (vendored 2.0.0 sdist removed), gunicorn>=23 with markdown2dash installed --no-deps everywhere, dash-clerk-auth 0.9.1 (satellite avatar fix).
• Tests from zero: 82 secretless tests green on flask AND fastapi (identity, social card, internal traffic, bulletin, battery scripts, pages); .flake8 + pytest.ini; flake8 debt cleared.
• CI/CD from zero: ci.yml (actionlint first, secretless matrix, docker build + in-image fingerprints + container boot + battery, advisory pip-audit) and cd.yml (owns main, sustained health, live battery).
• Fixes found while porting: flask visitor tracker now registers BEFORE add_llms_routes (dimll's bot middleware was answering crawlers first, so they were never counted); crawler-HTML canonical injection guarded (dimll >=2.3.4 emits its own — we were shipping two identical tags); Dockerfile sets PYTHONUNBUFFERED so boot diagnostics reach Render logs.

Container battery: 11/11 with the CDN card live. The live domain (muischeduler.2plot.dev, already DNS-cut-over) still serves the old build; merging this to main deploys and closes the gap.