refactor: move the public host out to vantage-site and vantage-docs

site/ and sitesvc/ become web/ and server/ in vantage-site; docsite/
becomes the root of vantage-docs. Their images move with them, to
vantage/vantage-site/{web,server} and vantage/vantage-docs.

Nothing here imported any of them, and sitesvc turned out to read no
database at all, so both cuts are clean. docker-compose.site.yml is
deleted rather than emptied: every service it held now ships with the
repository that builds it, and deploy/docker/docker-compose.yml is once
again exactly a self-hosted install.

Corrects four comments that named sitesvc for work it no longer does.

deploy/chart/vantage/templates/ingress.yaml

@@ -15,8 +15,8 @@ The web host is normally a wildcard — `*.vantage.example.com` — because that
 the per-tenant instance namespace; APP_ROOT_LABEL resolves the instance from the
 label. Kubernetes wildcard hosts match exactly one label, so this does not match
 the apex, and on the deployment this chart was written for it must not: the apex
-is the marketing site, a separate application (see site/ and
-docker-compose.site.yml). extraHosts exists for a genuine second name, not for
+is the marketing site, a separate application in the vantage-site repository.
+extraHosts exists for a genuine second name, not for
 reclaiming the apex.
 
 Agents reach the server's gRPC port, which is plain h2c — the server holds no

deploy/docker/docker-compose.site.yml

@@ -1,46 +0,0 @@
-services:
-    site:
-        image: gitea.hostxtra.co.uk/mrhid6/vantage/site:latest
-        restart: unless-stopped
-        ports:
-            - 3003:3000
-        depends_on:
-            - sitesvc
-    sitesvc:
-        image: gitea.hostxtra.co.uk/mrhid6/vantage/sitesvc:latest
-        restart: unless-stopped
-        ports:
-            - 8082:8082
-        environment:
-            PORT: "8082"
-            PUBLIC_URL: ${PUBLIC_URL:-}
-            SITE_ORIGIN: ${SITE_ORIGIN:-}
-            TRUST_PROXY: ${SITE_TRUST_PROXY:-false}
-            SMTP_HOST: ${SMTP_HOST:-}
-            SMTP_PORT: ${SMTP_PORT:-587}
-            SMTP_USERNAME: ${SMTP_USERNAME:-}
-            SMTP_PASSWORD: ${SMTP_PASSWORD:-}
-            SMTP_FROM: ${SMTP_FROM:-}
-            SMTP_TO: ${SMTP_TO:-support@hostxtra.co.uk}
-    # admin and adminsite are NOT here. They live in the vantage-admin
-    # repository, which carries its own fragment; the host composes all three
-    # files together:
-    #
-    #   docker compose \
-    #     -f vantage/deploy/docker/docker-compose.yml \
-    #     -f vantage/deploy/docker/docker-compose.site.yml \
-    #     -f vantage-admin/deploy/docker-compose.yml \
-    #     up -d
-    #
-    # LICENSE_SIGNING_KEY went with them, and must never appear in this file:
-    # admin is the only signer and the control plane must not hold the key.
-    # Static docs, served by nginx at vantage.hostxtra.co.uk/docs through its own
-    # proxy location. That location must sort ABOVE the catch-all forwarding to
-    # site:3003, or Next serves its own 404 for /docs. The container serves from
-    # /usr/share/nginx/html/docs because the proxy forwards the full path.
-    docsite:
-        image: gitea.hostxtra.co.uk/mrhid6/vantage/docsite:latest
-        restart: unless-stopped
-        ports:
-            - 3005:80
-networks: {}