Waving Hands moves to the shared hall host

The kit's shared setup, its own Caddy site file and access log (the
visitors, rollup and pulse read it), the gate taking a SITE override,
and the host's address everywhere. The old droplet forwards to hall
until the A record moves.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Jm2auWk6RP71CjaAb4FMoG

deploy/verify-ledgers.sh

@@ -6,7 +6,7 @@
 #   deploy/verify-ledgers.sh <droplet-ip-or-host> [https://site]
 set -euo pipefail
 HOST="${1:?usage: verify-ledgers.sh <droplet-ip-or-host> [https://site]}"
-SITE="${2:-https://hands.kestrelsnest.social}"
+SITE="${2:-${SITE:-https://hands.kestrelsnest.social}}"
 DIR="$(mktemp -d)"
 trap 'rm -rf "$DIR"' EXIT
 rsync -az "root@$HOST:/var/lib/waving-hands/rooms/" "$DIR/"