Sync main into feat/initial-build before merge-jobs refactor

.gitea/workflows/deploy.yml

@@ -62,10 +62,10 @@ jobs:
           test -f public/.htaccess
           cp public/.htaccess dist/.htaccess
 
-      - name: Guard — no TODO markers may ship in built HTML
+      - name: Guard — no TBD markers may ship in built HTML
         run: |
-          if grep -rlE '(TODO|TBD):' dist 2>/dev/null | grep -E '\.(html|svg)$'; then
-            echo "Built output contains unfilled <TODO:...> (or legacy <TBD:...>) markers."
+          if grep -rlE '(TBD):' dist 2>/dev/null | grep -E '\.(html|svg)$'; then
+            echo "Built output contains unfilled <TBD:...>) markers."
             echo "Fill in imprint.astro and privacy.astro operator fields before merging to main."
             exit 1
           fi