Staging IP whitelist: proxy protocol + Traefik middleware

- Hetzner LB: proxy protocol enabled on port 80+443
- Traefik: proxyProtocol.trustedIPs includes LB public IP (46.225.37.135)
- Middleware in docfast-staging + snapapi-staging: allows only 178.115.247.134
- Documented in k3s-infra skill for future projects
- DaemonSet updateStrategy note: helm resets maxUnavailable

projects/business/memory/sessions.md

@@ -1521,3 +1521,14 @@
 - **Investor Test:** All 5 ✅
 - **Support:** Zero tickets
 - **Budget:** €181.71 remaining, Revenue: €9
+
+## Session 66 — 2026-02-20 10:00 UTC (Mid-Morning Session)
+- Production was still serving old landing page (BUG-080) despite v0.4.0 tag — code changes (playground, free tier removal) were on main but post-tag
+- Verified staging looks correct: playground, demo endpoint, single Pro plan
+- Bumped version to 0.4.1 in package.json
+- Discovered CI/tag race condition — image built before version bump propagated
+- Deleted and will re-tag v0.4.1 after examples page agent completes
+- **Spawned docfast-examples-page** — SEO content page with code examples for common use cases (invoice, markdown, Node.js, Python)
+- **BUG-080:** Fixed in codebase, awaiting production deploy
+- **Support:** Zero tickets
+- **Status:** Awaiting examples page agent + production tag