The post-deploy smoke test was fetching www.cameleer.io/ directly,
which Cloudflare may serve from edge cache regardless of what rsync
just shipped — falsely greenlighting a failed deploy or red-flagging
a successful one. Append ?cb=$GITHUB_RUN_ID and Cache-Control:
no-cache to both fetches so the edge revalidates per run.
Surfaced by code review of the prior commit (4c98caab).
Manual-trigger workflow that substitutes PUBLIC_SALES_EMAIL into
placeholder/index.html, rsyncs placeholder/ to the Hetzner docroot
over SSH:222, then smoke-tests the live origin for the sentinel
string, mailto link, and logo URL.
Shares the deploy-production concurrency group with deploy.yml so
the two workflows can never race on the same docroot. Recovery is
the regular deploy.yml — no separate un-placeholder workflow.
