Images and media referenced by the private Copper Chronicle section are no
longer tracked by git. They live at /assets/copper-chronicle/ on the server
(/srv/www/binning.net/assets/) and are managed independently. Updated all
image links in src/private/copper-chronicle to use absolute paths rooted at
/assets/. Added --filter='protect assets/' to all deploy rsync commands to
prevent accidental deletion during deploys.
Moved the Copper Chronicle and resume into a private git submodule
(src/private), visible only to authenticated users. Added a lock symbol
to the mdbook sidebar for restricted sections. Reorganized nginx/nix
configuration files into a dedicated folder. Removed one-line descriptions
from the menu. Reduced custom CSS to better align the main website's theme
with mdbook's native styling. Personalized the index and blog introduction
pages.
Replaced the monolithic pipeline with three dedicated workflows: ci.yml
(build on every push), cd.yml (manual deploy to staging or prod), and
nightly.yml (scheduled build and deploy). This makes it easier to trigger
deploys independently of builds and to diagnose failures.
