Repo split: pages-seo is now product-only

This public repo now contains just the SEO product — admin, blog,
programmatic landing pages, calendar, API, schema, cron, CLI
installer. The marketing/installer surface that runs on the
maintainer's seo.benjaminb.xyz lives in a separate private repo
(Benjamin-Bloch/pages-seo-site) so users who fork this one only
see the product.

Removed from this repo:
  - public/index.html              (was the maintainer's marketing
                                    page) → replaced with a small
                                    sign-in landing
  - public/install.html             (browser installer)
  - public/install/run.{sh,py,js}   (terminal installers)
  - public/update.html              (browser updater)
  - public/sign-in.html             (folded into index.html)
  - public/marketing.css            (marketing-only styles)
  - public/_headers                 (only had install/run.* MIME
                                    rules)
  - functions/_middleware.js        (only gated installer surface)
  - functions/_lib/maintainer.js    (only consulted by the
                                    middleware)
  - functions/_lib/oauth_cookie.js  (only used by /api/update)
  - functions/api/install/*         (provisioner + check)
  - functions/api/update/*          (diff + OAuth + sync + rebuild)
  - schema: install_state table     (only used by the browser
                                    installer; the corresponding
                                    bundled schema.js was re-built
                                    from init.sql)
  - settings.is_maintainer key      (only the dropped middleware
                                    read it)

Everything else is unchanged — same admin SPA, same blog/prog
routes, same /api/admin/* surface, same setup wizard, same
calendar planner, same updates tab (which is the in-product
"check upstream" feature; it's separate from the maintainer-only
/update site).

Users who clone or fork this repo from now on get a clean product
tree they can deploy via the CLI installer at
seo.benjaminb.xyz/install — that site reads THIS repo as upstream.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: r8a5

functions/_lib/maintainer.js

@@ -319,25 +319,4 @@ CREATE TABLE IF NOT EXISTS site_aliases (
   updated_at      INTEGER NOT NULL
 );
 CREATE INDEX IF NOT EXISTS idx_aliases_kind ON site_aliases(kind);
-
--- Installer state. One row per install attempt keyed by the project
--- slug + a fingerprint of the API token (we never store the token
--- itself). Lets a half-finished install resume on retry rather than
--- restarting from step 1.
-CREATE TABLE IF NOT EXISTS install_state (
-  project          TEXT NOT NULL,                    -- pages slug the user chose
-  token_fp         TEXT NOT NULL,                    -- sha256 of the token, first 16 hex chars
-  account_id       TEXT,
-  d1_id            TEXT,
-  r2_name          TEXT,
-  pages_created    INTEGER NOT NULL DEFAULT 0,       -- 0 | 1
-  deploy_started   INTEGER NOT NULL DEFAULT 0,       -- 0 | 1
-  pages_url        TEXT,
-  last_error       TEXT,
-  last_step        TEXT,
-  created_at       INTEGER NOT NULL,
-  updated_at       INTEGER NOT NULL,
-  PRIMARY KEY (project, token_fp)
-);
-CREATE INDEX IF NOT EXISTS idx_install_updated ON install_state(updated_at DESC);
 `;

functions/_lib/oauth_cookie.js

@@ -49,12 +49,6 @@ const FALLBACK = {
   // Update-check metadata. Written when the operator installs from
   // /install (browser path) so the Updates admin tab can compare the
   // installed commit to upstream HEAD and offer a one-click rebuild.
-  // Set to '1' on the upstream maintainer's deployment so the
-  // installer / updater pages (/install, /update, /install/run.*) stay
-  // accessible there. Every fresh user install starts with this
-  // empty, so those routes 404 on user-facing domains. Read via
-  // is_maintainer(env) in _lib/maintainer.js.
-  is_maintainer:           () => '',
   install_method:          () => '',   // 'browser' | 'cli' | ''
   installed_sha:           () => '',   // upstream main commit SHA at install time
   install_repo_owner:      () => '',   // user's GitHub fork owner