release: add docs/DEPLOYMENT.md

docs/DEPLOYMENT.md

@@ -18,6 +18,12 @@ claim carries the file it came from.
 > the monorepo's `deploy/render/main.py` is an earlier, tunnel-less revision. Edits must go to the
 > three real repositories, never to the local `deploy/` tree.
 
+> **Hostnames are deliberately not published.** The orchestrator's public hostname appears throughout
+> this release as `<backend-host>`. The deployment is documented for reproducibility — the topology,
+> the environment-variable *names*, the timeout chain and the failure modes are all exact — without
+> advertising the live endpoint. The three deployment repositories are private and are not part of
+> this release.
+
 **Companions.** [`architecture/02-deployment-topology.md`](architecture/02-deployment-topology.md)
 (the long-form topology treatment), [`OPERATIONS.md`](OPERATIONS.md) (running the live system),
 [`SECURITY.md`](SECURITY.md) (the trust boundary),
@@ -70,7 +76,7 @@ Read from the GitHub API during the release reconnaissance (`release/CURRENT_REL
 | Component | Repository | Visibility | Branch | Revision | Host |
 |---|---|---|---|---|---|
 | Frontend | `Anish-lab-blip/SatQuery-Frontend` | **private** | `main` | **`2d7ae53b482d`** | Cloudflare Pages → `satquery.pages.dev` |
-| Backend / orchestrator | `Anish-lab-blip/SatQuery-Backend` | **private** | `main` | **`89d80eaddec5`** | Render → `satquery-backend-m4yv.onrender.com` |
+| Backend / orchestrator | `Anish-lab-blip/SatQuery-Backend` | **private** | `main` | **`89d80eaddec5`** | Render → `<backend-host>` |
 | Inference | `Anish-lab-blip/SatQuery-Inference` | **private** | `main` | **`5a0936ace491`** | Codespace `potential-space-trout-r4ppw969w45j2pvvw`, port 8000 |
 | Public umbrella | `Anish-lab-blip/SatQuery-AI` | **public** | `main` | `3dcabd32da41` ("Initial commit") | this release home |
 | Monorepo (working copy) | `C:/Users/anish/satquery-ai` | local only | `master` | `9d57aed` | **no git remote**; 334 dirty entries |
@@ -108,7 +114,7 @@ Browser
 Cloudflare Pages  —  satquery.pages.dev                (static frontend, 11 pages)
   │  HTTPS / JSON  →  /api/*
   ▼
-Render            —  satquery-backend-m4yv.onrender.com (orchestrator / gateway)
+Render            —  <backend-host> (orchestrator / gateway)
   │  outbound long-poll  POST /tunnel/agent
   ▼
 GitHub Codespace  —  FastAPI inference, CPU, port 8000
@@ -432,7 +438,7 @@ monorepo's stale blueprint.
 | `SATQUERY_MAX_FILE_BYTES` | per-file cap, shared with Render so the two layers cannot disagree |
 | `SATQUERY_ASSET_ENABLED` / `SATQUERY_ASSET_DIR` | both required for `/v1/assets`; **fails closed (503)** otherwise |
 | `SATQUERY_ASSET_MAX_FILES` / `SATQUERY_ASSET_TTL_S` | optional handle capacity / lifetime |
-| `SATQUERY_HUB_URL` | the Render orchestrator the tunnel agent dials out to; default `https://satquery-backend-m4yv.onrender.com` |
+| `SATQUERY_HUB_URL` | the Render orchestrator the tunnel agent dials out to; default `https://<backend-host>` |
 
 Sources: `docs/DEPLOYMENT_TOPOLOGY.md` §3.3; `deploy/codespace/launch.sh`.