Document the real bus.saillant.cc exposure chain (cloudflared ->
Traefik -> Tower nginx pinned by digest) now that Task 7 hosting
and Task 8 deploy.sh have been validated end-to-end.
Automate publishing the Hugo blog to the nginx host on Tower: build
with hugo --minify, rsync the public/ output to bus-blog, then smoke
test the public HTTPS URL to confirm the route is live end-to-end.
Scaffold the bus.saillant.cc blog: Hugo site config, a hand-written
vendored theme (terminal-bus, zero deps), and the first post plus an
about page.
The theme is minimal on purpose: single baseof/home/page/section
layouts and one CSS file, styled as a terminal/hackerspace prompt
(green-on-dark, ASCII banner, monospace). No upstream theme pulled in,
per the no-blind-dependency policy.
Consumes journal entries later (Task 4); build output feeds deploy.sh
(Task 8). blog/public/ and blog/resources/ stay gitignored.