Manual-trigger workflow that substitutes PUBLIC_SALES_EMAIL into placeholder/index.html, rsyncs placeholder/ to the Hetzner docroot over SSH:222, then smoke-tests the live origin for the sentinel string, mailto link, and logo URL. Shares the deploy-production concurrency group with deploy.yml so the two workflows can never race on the same docroot. Recovery is the regular deploy.yml — no separate un-placeholder workflow.