release: public discovery and crawl contracts

[mahmutkaya]

Summary

• Release the reviewed public discovery and crawl-contract work from develop commit 721b7b97e2468d6a996f45638b110cfd265862c8 to production.
• The change adds six-locale alternatives and QR-menu guides, truthful metadata/schema and pricing language, reciprocal locale discovery, sitemap/robots policy, and raw emitted-output CI coverage.

Issue / plan link

• Release for PR #271, merged to develop.
• Ongoing verification: docs/runbooks/public-search-discovery.md.

Type

• feat · [ ] fix · [ ] refactor · [ ] chore · [ ] docs · [ ] test · [ ] perf

NFR triage

• D1 security / D7 privacy: crawler policy covers private routes; no auth, payment, or PII changes.
• D2 performance / D3 resources: server-rendered marketing pages and build-time discovery checks; no new runtime service.
• D4 UX / D5 accessibility: localized crawlable navigation, semantic guide/comparison content, and native anchors.
• D6 i18n: six locales, including Arabic RTL.
• D8 observability / D9 testing: canonical and staging emitted HTML/XML contracts plus CI checks.
• D10 conventions: reviewed implementation uses shared route inventory and repository conventions.

i18n parity

• en · [x] fr · [x] de · [x] nl · [x] tr · [x] ar

Standard checklist

• Typecheck, lint, unit tests, and canonical/staging production-shaped builds passed on the reviewed source PR.
• No secrets in the diff; no migrations or new environment variables.
• Release diff is the single reviewed develop commit listed above.
• Staging runtime reports merge revision 721b7b97e2468d6a996f45638b110cfd265862c8; all 54 public-route/locale combinations pass the noindex raw-output verifier.

Test plan

• Require this release PR's CI and Sonar checks to pass, then use the strict pr-merge-gate.sh merge gate.
• After the main image workflow succeeds for the exact merge SHA, roll only the sofra service and verify the canonical 54-route inventory and runtime revision.

Deploy notes

• No migration or new environment variables.
• Staging verification is complete. After release CI and the main image build pass, pull and restart only sofra; no database or Caddy changes.
• Sitemap submission and later search-engine recrawl are separate from release verification.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud