feat(seo): add public discovery and crawl contracts

[mahmutkaya]

Summary

Publish a sourced GloriaFood alternatives comparison and distinct Switzerland/Geneva QR-menu guides in all six marketing languages. Correct current pricing, GloriaFood's announced service end, catalogue-language coverage and hardware claims across the existing pages.

Use one public route inventory for HTML metadata and sitemap alternates. Omit invented sitemap freshness/importance and the universal free software offer; unpublished legal pages and noncanonical deployments remain noindex. Locale destinations are server-rendered anchors.

The emitted-output contract parses exact anchor destinations, with a prefix-negative control. The CI-discovered transitive brace-expansion and fast-uri advisories are fixed through patched overrides and lockfile versions.

Issue / plan link

• Closes AEO content remainder: the 'GloriaFood alternatives (Switzerland)' listicle + per-market guides (SOFRA-AEO-PLAN §2) #242
• Workspace docs/plans/SOFRA-AEO-PLAN.md, P3/P4; maintenance moves to docs/runbooks/public-search-discovery.md.

Type

• feat
• fix
• test

NFR triage

• D1 security / D7 privacy: public marketing data only; canonical origins remain trusted configuration, private routes stay noindex. No account permissions or PII logging changes.
• D2 performance / D3 resources: public routes remain server rendered; two build configurations validate baked production/staging behavior.
• D4 UX / D5 accessibility: visible sourced comparison/guides, useful internal links, native locale anchors and table headings.
• D6 i18n: complete six-language content and shared schema/message text; Arabic emits RTL.
• D8 observability / D9 testing: emitted HTML/XML contract checks body, resolved translations, metadata, reciprocal clusters, schema/date parity, robots, private routes and conditional legal publication.
• D10 conventions: shared route inventory, craft tokens, scoped files and independent review.

i18n parity

• Added discovery.*, comparison service update, footer guide links and configurator changelog entry; corrected pricing, feature and case-study claims.
• en · [x] fr · [x] de · [x] nl · [x] tr · [x] ar

Standard checklist

• Typecheck, lint, unit tests and both production-shaped builds pass locally.
• Craft tokens; no new ad-hoc colors or payment arithmetic.
• No secrets in the diff.
• Branch from develop; release through develop → main.
• Independent reviews of each author's paths completed before push.

Test plan

• 84 suites / 1,175 unit tests pass; message parity, file limits and diff checks pass.
• npm audit --audit-level=high reports zero vulnerabilities; the partner-panel browser assertion follows the corrected market-qualified payment description.
• Canonical emitted-output contract: all 48 unconditional locale routes, legal with absent/published runtime identity, sitemap alternates, raw head/body, locale anchors, private routes, alias host and schema/text/date consistency.
• Separate staging-origin build/contract: noindex public pages, no hreflang, robots disallow-all and empty sitemap, including published legal identity.

Deploy notes

• No migration or new environment variables.
• Merge to develop, build and roll sofra-staging, verify its emitted discovery posture, then release develop → main and roll sofra on the staging box.
• Refresh and verify live canonical pages/sitemap and update the submitted search-engine sitemap. Discovery submission is separate from indexing or citation evidence.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud