Document reusable deployment settings

STATE.md

@@ -1,6 +1,6 @@
 # N8 Parser: current state
 
-Last updated: 2026-07-30
+Last updated: 2026-08-03
 
 This file is the short handoff state for future Codex threads. Read this first before touching the project, so the whole chat history does not need to be carried forward.
 
@@ -42,6 +42,11 @@ Current runtime is local infrastructure, not the old VPS.
 5. AI writer rewrites accepted posts into editor-ready drafts.
 6. Editor page allows review, editing, category/source tag selection, media upload/removal, accept/reject.
 7. Site poster automatically publishes accepted media-ready posts to Ghost.
+   - As of 2026-08-03, site publishing is provider-based: `site_poster_provider=ghost`
+     for FN-8, with `site_poster_base_url` and `site_poster_secret_file` copied from
+     legacy Ghost settings by migration `040_site_poster_provider_settings.sql`.
+   - New installs default `site-poster` to disabled and must explicitly set provider,
+     base URL, secret, and `site_poster_enabled=true`.
 
 ## Important Text Rules
 
@@ -85,6 +90,7 @@ On 2026-06-17 the hashtag flow was fixed:
 As of 2026-07-29:
 
 - Admin title comes from env `ADMIN_APP_TITLE`; fallback is `Редакторская`. The old hardcoded `Parser Admin` title and lightning SVG are gone.
+- Browser/page title comes from env `ADMIN_SITE_TITLE`; fallback is `Редакторская`.
 - Admin sidebar is collapsible and collapsed by default; collapsed state shows icons only.
 - Theme toggle supports dark/light themes. Tailwind `app.*` colors use RGB-channel CSS variables (`rgb(var(--app-...)/<alpha-value>)`), so do not revert them to hex variables or opacity utilities will break. Light-theme hover contrast is patched in base CSS.
 - `/editor` desktop filter panel is collapsible and collapsed by default; the feed expands into the freed width.
@@ -119,6 +125,10 @@ As of 2026-07-29:
 - Secrets should not be committed.
 - `.env` should contain only secrets and deploy-specific values.
 - Runtime settings that are not secrets should live in DB/admin settings.
+- Dangerous FN-8 defaults were removed from runtime defaults on 2026-08-03:
+  no default TG publication chat, no default VK storage group, no default Ghost URL/key path.
+- Docker image now copies `db/migrations`, and `docker-entrypoint.sh` runs
+  `python /app/scripts/apply_migrations.py` before starting the app.
 - Admin has login protection and server has firewall/fail2ban hardening from previous iterations.
 
 ## Working Rules For Future Codex Runs