site generator: commands/*.md with front matter -> k8s/site/

- build/build.mjs: one-file-per-command content (filename = command,
  underscores = spaces; help/suggestion/params/prefix/text/hidden in
  front matter; ${args} ${date} ${time} ${ls} ${help} resolved at runtime)
- generates index.html (banner + chips), commands.json (the single data
  source), hello.txt for curl, style.css via tailwind v4
- src/site.js is now dispatch-only over commands.json; typewriter kept
- src/telnet.py: stdlib telnet shell sharing commands.json
- k8s: python telnet sidecar in the pod + LoadBalancer service 23->2323
- .gitea/workflows/site.yml fails CI when k8s/site/ is not the built output

k8s/service.yaml

@@ -11,3 +11,22 @@ spec:
     - name: http
       port: 80
       targetPort: http
+---
+# The telnet shell, for the tailnet. Cilium assigns the IP from the LB pool
+# entry in sys-cilium/lb.tf (same pattern as gitea-ssh). Reach it with
+# `telnet <ip> 23` from inside the tailnet.
+apiVersion: v1
+kind: Service
+metadata:
+  name: momme-world-telnet
+  labels:
+    app: momme-world
+spec:
+  type: LoadBalancer
+  externalTrafficPolicy: Local
+  selector:
+    app: momme-world
+  ports:
+    - name: telnet
+      port: 23
+      targetPort: telnet