chore: scrub instance details and personal data from committed artefacts

Blood-pressure fixtures in the in-target integration suite were copied
from live readings; they are now synthetic with the same in/out split so
every assertion holds. Hard-coded operator hostnames move behind env vars
(DEPLOY_LOGS_URL, HEALTHLOG_PROD_URL), the codex client identifies via
the public repository URL, the OpenAPI servers entry points at a neutral
example host, and remaining workflow, docs and comment references to the
operator's instance or working notes are generalised. The compose
whitelist also gains DEPLOY_WEBHOOK_SECRET, which was missing and made
the deploy webhook unusable on compose installs.

src/lib/ai/codex-client.ts

@@ -92,7 +92,7 @@ function isSlugRejection(status: number, bodyExcerpt: string): boolean {
 }
 
 const ORIGINATOR = "healthlog";
-const USER_AGENT = "HealthLog/1.0 (+https://healthlog.bombeck.io)";
+const USER_AGENT = "HealthLog/1.0 (+https://github.com/MBombeck/HealthLog)";
 
 interface CodexClientConfig {
   accessToken: string;

src/lib/openapi/registry.ts

@@ -52,7 +52,10 @@ const openApiBase: Pick<
     contact: { name: "HealthLog", url: "https://healthlog.dev" },
   },
   servers: [
-    { url: "https://healthlog.bombeck.io", description: "Production" },
+    {
+      url: "https://healthlog.example.com",
+      description: "Your self-hosted instance",
+    },
     { url: "http://localhost:3000", description: "Local dev" },
   ],
   tags: [

src/lib/tz/resolver.ts

@@ -65,8 +65,9 @@ const BERLIN_DAY_FORMATTER = new Intl.DateTimeFormat("en-US", {
  * Format a Date as `YYYY-MM-DD` in `Europe/Berlin`. The seven Insight
  * status helpers (`bmi`, `blood-pressure`, `weight`, `pulse`, `mood`,
  * `medication-compliance`, `general`) all key their per-day cache on
- * this — Marc's primary tenant runs in Berlin and the cache action
- * row reads identically across helpers when the formatter lives here.
+ * this — the maintainer's primary tenant runs in Berlin and the cache
+ * action row reads identically across helpers when the formatter lives
+ * here.
  *
  * For per-user surfaces, prefer `userDayKey(date, tz)` from `./format`.
  * This helper exists for the cache-key path where the day-bucket is