Foundation decisions

The canonical log is DECISIONS.md in the repo root. In brief:

1. Domain: technologybusiness.co (superseded eastwestcraft.com).
2. Scope: M manages a few client sites; not a self-service builder.
3. Architecture: Astro static site — no live server or database to attack.
4. CMS: Decap — git-based, free, no cloud dependency.
5. Hosting: Cloudflare Pages — WAF, DDoS protection, Turnstile, free tier.
6. Auth: GitHub OAuth only; never a homegrown login.
7. Headers: CSP, HSTS and friends set once at the host, via _headers.
8. Forms: small serverless functions with validation + Turnstile (later step).
9. Accessibility: WCAG AA baked in — tokens, semantic HTML, required alt text.
10. Docs: this site plus DECISIONS.md, generated as a byproduct of each step.