fix: update QuickStart guide and SSL config for local Postgres dev (#4)

* fix: improve mobile navigation and layouts on docs site

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: replace mobile top nav with bottom navigation bar for better reachability

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: update QuickStart guide and SSL config for local Postgres dev

The default database URL used sslmode=require, but the docker-compose
Postgres has no SSL configured — causing mantle init to fail for users
following the QuickStart guide. Change the code default to sslmode=disable
(matching the docs and the localhost dev URL) and add SSL guidance to
the Getting Started guide. Production examples throughout the docs
already use sslmode=require.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: grpc CVE, copilot review feedback, sslmode default restored

- google.golang.org/grpc v1.79.1 → v1.79.3 (fixes CVE-2026-33186)
- Fix overlay cloneNode bug: closeSidebar referenced detached node
  (use onclick assignment instead of cloneNode pattern)
- Safe-area-inset: bottom padding accounts for iOS home indicator
- Tables: display:block + overflow-x:auto directly (no wrapper needed)
- Remove overflow-x-hidden from docs container (was clipping tables)
- Restore sslmode=disable as default for local dev (sslmode=require
  broke docker-compose dev workflow; warning still logs in production)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix(ci): only trigger once per PR (push on main, pull_request on branches)

* fix: address all 6 Copilot review comments on PR #4

1. sslmode=disable → sslmode=prefer (tries TLS, graceful fallback for local dev)
2. grpc bump is intentional (CVE-2026-33186) — already noted in PR description
3. Table scroll comment updated to match unconditional behavior
4. isDocs derived from pathname (/docs prefix) not !isHome — fixes 404 page
5. 404 page gets pb-20 for mobile bottom nav clearance
6. Broken /configuration link → /docs/configuration in getting-started

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: address 2 new Copilot comments on PR #4

1. Table CSS: removed display:block (breaks border-collapse), use
   :has(> table) for scrollable parent instead, preserving table layout
2. getting-started.md: sslmode=disable → sslmode=prefer to match code default

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: address 2 Copilot comments — md-lg nav gap and sidebar bottom offset

1. Bottom nav: md:hidden → lg:hidden so menu button is visible at
   768-1023px (bridging the gap between mobile and desktop sidebar)
2. Bottom padding: md:pb-0 → lg:pb-0 on all pages to match
3. Sidebar mobile bottom: responsive class instead of inline style,
   only reserves bottom-nav space below lg breakpoint

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: table :has selector and sidebar aria-expanded/aria-hidden

1. Table scroll: .prose :has(> table) → .prose:has(table) so it matches
   when table is a direct child of the prose article
2. Sidebar toggle: aria-expanded on button, aria-hidden toggled on
   overlay in sync with visibility state

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: aria-label on nav landmarks, reset aria state on sidebar close

1. Distinct aria-labels: "Main navigation" and "Mobile navigation"
2. closeSidebar() now resets aria-hidden on overlay and aria-expanded
   on the menu button (fixes stuck state on overlay/link close)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: update site getting-started sslmode=disable → sslmode=prefer

* chore: remove redundant root docs, update URLs to mantle.dvflw.co

- Remove 12 docs/*.md files (content lives in site/src/content/docs/)
- Update all mantle.dev references → mantle.dvflw.co across:
  internal/cli/root.go, site/src/layouts/Base.astro, astro.config.mjs,
  site/src/pages/404.astro, marketing/*.md

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Update site/src/styles/global.css

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

* fix: README links to mantle.dvflw.co, GitHub target="_blank", deprecated CSS

- README doc links now point to https://mantle.dvflw.co/docs/*
- GitHub external links get target="_blank" rel="noopener"
- word-break: break-word → overflow-wrap: anywhere (deprecated property)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add target=_blank rel=noopener to sidebar GitHub link

* fix: address 4 review comments on PR #4

Verified each finding — all 4 needed fixes:

1. README: /docs/plugins → /docs/plugins-guide, /docs/contributing → CONTRIBUTING.md
2. Sidebar: aria-hidden="true" + inert on mobile drawer when closed,
   synced on open/close in both Nav and DocsSidebar handlers
3. isDocs: strict check — pathname === '/docs' || startsWith('/docs/')
4. Nav script timing: deferred init via requestAnimationFrame loop
   until sidebar DOM exists (Nav renders before DocsSidebar)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: bail out of deferInitNav after 10 frames on non-docs pages

* fix: sslmode=prefer warning for non-loopback hosts, prefix nav globals

- Warn at startup when database URL uses sslmode=prefer with a
  non-loopback host (localhost/127.0.0.1/::1 are excluded)
- Prefix inline script globals in Nav.astro (_mantleNavRetries,
  _mantleDeferInitNav) to avoid collisions

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Update internal/config/config.go

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

* fix: add missing net and strings imports for sslmode check

The CodeRabbit suggestion (4b48827) replaced the simple string
comparison with net.ParseIP/strings.EqualFold but didn't add the
required imports, breaking CI.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>

Author: 3 people

.github/workflows/ci.yml

@@ -2,9 +2,8 @@ name: CI
 
 on:
   push:
-    branches: ['**']
+    branches: [main]
   pull_request:
-    branches: ['**']
 
 jobs:
   test:

README.md

@@ -50,7 +50,7 @@ steps:
 - **Checkpoint and Resume** -- Steps checkpoint to Postgres after completion. Crash mid-workflow? Restart picks up from the last completed step.
 - **Secrets as Opaque Handles** -- Credentials are AES-256-GCM encrypted at rest and resolved at connector invocation time. Never exposed in expressions, logs, or step outputs.
 
-[How Mantle compares to Temporal, n8n, LangChain, Airflow, and others.](/docs/comparison)
+[How Mantle compares to Temporal, n8n, LangChain, Airflow, and others.](https://mantle.dvflw.co/docs/comparison)
 
 ## Quick Start
 
@@ -69,7 +69,7 @@ mantle apply examples/hello-world.yaml
 mantle run hello-world
 ```
 
-17 example workflows are included in [`examples/`](examples/). See the [Getting Started guide](/docs/getting-started) for a full walkthrough.
+17 example workflows are included in [`examples/`](examples/). See the [Getting Started guide](https://mantle.dvflw.co/docs/getting-started) for a full walkthrough.
 
 ## Connectors
 
@@ -85,7 +85,7 @@ mantle run hello-world
 | Postgres | `postgres/query` | Parameterized SQL against external databases |
 | S3 | `s3/put`, `s3/get`, `s3/list` | Put, get, list objects (S3-compatible) |
 
-Need something else? Write a [plugin](/docs/plugins). Any executable that reads JSON from stdin and writes JSON to stdout -- Python, Rust, Node, Bash.
+Need something else? Write a [plugin](https://mantle.dvflw.co/docs/plugins-guide). Any executable that reads JSON from stdin and writes JSON to stdout -- Python, Rust, Node, Bash.
 
 ## CLI Reference
 
@@ -132,7 +132,7 @@ Need something else? Write a [plugin](/docs/plugins). Any executable that reads
 | `mantle cleanup` | Clean up old executions and artifacts |
 | `mantle version` | Print version info |
 
-See the [CLI Reference](/docs/cli-reference) for full usage and flags.
+See the [CLI Reference](https://mantle.dvflw.co/docs/cli-reference) for full usage and flags.
 
 ## Configuration
 
@@ -204,7 +204,7 @@ make clean      # Remove built binary
 
 ## Contributing
 
-Contributions are welcome. Please open an issue first to discuss what you want to change. See the [Contributing guide](/docs/contributing) for details.
+Contributions are welcome. Please open an issue first to discuss what you want to change. See [CONTRIBUTING.md](CONTRIBUTING.md) for details.
 
 ## License