docs(agents): push service is deployed (push.skate-spots.org, Caddy + DNS)

AGENTS.md

@@ -777,8 +777,16 @@ session with **no other memory of this project**. So:
     to subscribers — offers (`30403`, the whole negotiation), requests (`31872`),
     confirms (`31871`) — via `#p` filters built from the live subscription set
     (so it only sees events for subscribers; the payload is a **generic body**,
-    never the amount/item). **Remaining:** deploy (`npm run deploy:push` + Caddy)
-    and Android FCM (Phase 2). ⚠️ Web push works in browsers; the Capacitor WebView
+    never the amount/item). ✅ **DEPLOYED (2026-10-01):** `npm run deploy:push` →
+    the CVM host, systemd unit `skatespots-push`
+    (`/home/ubuntu/skatespots-push`; VAPID keys generated **on the host** into
+    `.env`). Public TLS: `push.skate-spots.org` (Netlify DNS **A → 185.18.221.2**,
+    and a site block **appended** to the host's `/etc/caddy/Caddyfile` — NEVER
+    overwrite it, it also serves `ai.skate-spots.org`). Verified
+    `https://push.skate-spots.org/health` → 200. ⚠️ 000 from this box = a **stale
+    local resolver cache** (NXDOMAIN); confirm with
+    `curl --resolve push.skate-spots.org:443:185.18.221.2 …`. **Remaining:**
+    Android FCM (Phase 2). ⚠️ Web push works in browsers; the Capacitor WebView
     needs FCM for the APK. (Approach + tradeoffs came from the
     Numo/Linky/BTCPay review this session.)
 - **Cordn coordinator support (client-side, 2026-09-29):** Cordn is an **MLS