Kestrel's Hall moves into the kit and onto the shared host

The landing page was a static page in the blog, served by the Yunohost
box through an nginx drop-in and an SSOwat rule. It now lives in
gamehall/site beside family.json, is served by Caddy on the shared host
with the games (gamehall/gamehall.caddy), and publishes with
gamehall/deploy.sh. Its share image is its own, not the blog's.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jm2auWk6RP71CjaAb4FMoG

gamehall/gamehall.caddy

@@ -0,0 +1,23 @@
+# Kestrel's Hall, the front door of the family: a static page, no server.
+gamehall.kestrelsnest.social, gamehall.159.203.115.252.sslip.io {
+	root * /opt/gamehall
+	encode gzip zstd
+
+	header {
+		Strict-Transport-Security "max-age=31536000"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "DENY"
+		Referrer-Policy "no-referrer"
+		# Revalidated on every load, so a deploy shows up at once.
+		Cache-Control "no-cache"
+	}
+
+	log {
+		output file /var/lib/caddy/gamehall-access.log {
+			roll_size 10MiB
+			roll_keep 30
+		}
+	}
+
+	file_server
+}