CI/CD

Document pipelines, artifacts, deploy targets, and hooks (e.g., HAProxy reloads on cert updates).