Complete Git-native visual CMS product flows

[DMTcorp]

Summary

• complete the hosted Git-native CMS application flows across Next.js 16 and Astro 7
• add editor, preview, review/staging/release/rollback, assets, localization, SEO/search,
  scheduling, MCP and delivery integrations
• add live Vercel/R2/GitHub acceptance tooling, all-port contract suites and the 25-point
  Definition of Done evidence
• bundle the editorial font system locally and harden the production dependency graph to zero
  known advisories

Verification

• pnpm check — 73/73 typecheck tasks, 82/82 unit/contract tests, 0 architecture violations,
  39/39 builds, all bundle/typing budgets
• pnpm test:e2e — 56 passed across Next/Astro × Chromium/Firefox/WebKit; 4 canonical
  Chromium-only visual snapshot skips
• pnpm audit --prod — no known vulnerabilities
• production deploys: https://git-native-cms-next.vercel.app and
  https://git-native-cms-astro.vercel.app

Live acceptance

The final stateful publish/rollback smoke is run after the scoped R2 S3 credential is supplied to
the local secure configurator. No credentials are committed or printed.