release: add docs/architecture/02-deployment-topology.md

docs/architecture/02-deployment-topology.md

@@ -8,7 +8,7 @@
 
 > **One-paragraph summary.** SatQuery AI is deployed as **four tiers**: a static browser client on
 > **Cloudflare Pages** (`satquery.pages.dev`), a thin stateless **gateway/orchestrator on Render**
-> (`satquery-orchestrator` at `satquery-backend-m4yv.onrender.com`), a **FastAPI inference service inside
+> (`satquery-orchestrator` at `<backend-host>`), a **FastAPI inference service inside
 > a GitHub Codespace** (FastAPI on port `8000`), and **Hugging Face** as the project/model-presence tier.
 > The gateway does not dial into the Codespace. Instead the Codespace **dials out** to the gateway over a
 > long-poll **tunnel** (`POST /tunnel/agent`), because a *forwarded* Codespace port returns **HTTP 302**
@@ -28,7 +28,7 @@ USER / BROWSER
 Cloudflare Pages — static frontend          satquery.pages.dev
   │  HTTPS, JSON, /api/*
   ▼
-Render — orchestrator / API gateway         satquery-backend-m4yv.onrender.com
+Render — orchestrator / API gateway         <backend-host>
   │  service: satquery-orchestrator
   │  outbound long-poll  (POST /tunnel/agent)   ← direction is INVERTED
   ▼
@@ -59,7 +59,7 @@ flowchart LR
 |---|---|---|---|---|
 | Browser | the user's machine | `frontend/` static JS | **No** — never | no |
 | Static | Cloudflare Pages, `satquery.pages.dev` | HTML/CSS/JS only | **No** | no |
-| Gateway | Render, `satquery-orchestrator`, `satquery-backend-m4yv.onrender.com` | `deploy/render/main.py` (`SatQuery-Backend` in production) | **Yes** — `GITHUB_TOKEN` (and `HF_TOKEN` if the proxy path is used) | no |
+| Gateway | Render, `satquery-orchestrator`, `<backend-host>` | `deploy/render/main.py` (`SatQuery-Backend` in production) | **Yes** — `GITHUB_TOKEN` (and `HF_TOKEN` if the proxy path is used) | no |
 | Inference | GitHub Codespace `potential-space-trout-r4ppw969w45j2pvvw`, port `8000` | `app/space_app.py::build_space_app()` via `deploy/codespace/serve.py` | no gateway secrets | ephemeral asset store only |
 | Presence | Hugging Face (`hf/`) | project README / model cards | no | no |
 
@@ -732,7 +732,7 @@ This is the same class of trap as §9.4 below: **the working copy is not the dep
 
 ### 7.1 The measured payload
 
-Probed live on 2026-09-25 against `https://satquery-backend-m4yv.onrender.com/api/health`
+Probed live on 2026-09-25 against `https://<backend-host>/api/health`
 (`release/repo/docs/DEPLOYMENT.md` §2):
 
 ```json
@@ -744,7 +744,7 @@ Probed live on 2026-09-25 against `https://satquery-backend-m4yv.onrender.com/ap
 ```
 
 Exact command used elsewhere in the project's evidence register:
-`curl --noproxy '*' https://satquery-backend-m4yv.onrender.com/api/health`
+`curl --noproxy '*' https://<backend-host>/api/health`
 (`docs/FINAL_DELIVERY_REPORT.md` §4).
 
 ### 7.2 Field-by-field
@@ -1161,7 +1161,7 @@ else
 The hub URL is a defaulted variable, so a renamed Render service can be overridden in the Codespace:
 
 ```bash
-export SATQUERY_HUB_URL="${SATQUERY_HUB_URL:-https://satquery-backend-m4yv.onrender.com}"
+export SATQUERY_HUB_URL="${SATQUERY_HUB_URL:-https://<backend-host>}"
 ```
 
 ### 9.3 The asset-upload environment, and why `/tmp` is correct
@@ -1229,7 +1229,7 @@ to a barely-chosen location."*
 | Component | Repository | Branch | Revision | Host |
 |---|---|---|---|---|
 | Frontend | `SatQuery-Frontend` | `main` | **`2d7ae53b482d`** | Cloudflare Pages → `satquery.pages.dev` |
-| Backend / orchestrator | `SatQuery-Backend` | `main` | **`89d80eaddec5`** | Render → `satquery-backend-m4yv.onrender.com` |
+| Backend / orchestrator | `SatQuery-Backend` | `main` | **`89d80eaddec5`** | Render → `<backend-host>` |
 | Inference | `SatQuery-Inference` | `main` | **`5a0936ace491`** | Codespace `potential-space-trout-r4ppw969w45j2pvvw`, port 8000 |
 | Public umbrella | `SatQuery-AI` | `main` | `3dcabd32da41` | the release home |
 | Monorepo working copy | `C:/Users/anish/satquery-ai` | `master` | `9d57aed` | local only, **no remote**, 334 dirty entries |