feat: scaffold Astro 7 site on Cloudflare Workers

Adds apps/site (@codingcatdev/site) as a new workspace package alongside the
existing Next app, which keeps building until the dashboard is ported.

Added rather than replacing apps/web because the pre-Next Astro app (branch
`dev`) was also named @codingcatdev/web — replacing in place would make every
`pnpm --filter` and the git history ambiguous.

- output: "server" + @astrojs/cloudflare 14 (SSR on Workers)
- wrangler.jsonc with dev/production envs; D1 binding deliberately omitted
  until the codingcat.dev Cloudflare account is available
- rawFonts() Vite plugin harvested verbatim from dev:apps/web/astro.config.mjs
  (Workers has no filesystem; needed for OG image generation)
- Dropped that config's Vite alias/dedupe/optimizeDeps block — it existed to
  fight @sanity/visual-editing under Astro 6 and is obsoleted by
  @sanity/visual-editing-standalone
- Node pinned to >=22.12 (.nvmrc + engines), required by sanity 6 / @sanity/ui 4
- baseline/ holds pre-migration production sitemap + RSS snapshots for
  post-cutover parity diffing (472 URLs, 50 items per feed)

Verified: pnpm build succeeds and wrangler dev serves SSR HTML via workerd.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HZ4S1uTJwFdbv3A6PHWfw2

Author: codercatdev

.nvmrc

@@ -0,0 +1 @@
+22.23.2

apps/site/.dev.vars.example

@@ -0,0 +1,2 @@
+# Local secrets for `wrangler dev` / platformProxy. Copy to .dev.vars (gitignored).
+SANITY_API_READ_TOKEN=

apps/site/astro.config.mjs

@@ -0,0 +1,57 @@
+import { defineConfig } from "astro/config";
+import cloudflare from "@astrojs/cloudflare";
+import react from "@astrojs/react";
+import tailwindcss from "@tailwindcss/vite";
+import fs from "node:fs";
+import path from "node:path";
+
+/**
+ * Inline font files as Uint8Array at build time.
+ * Required for OG image generation on Workers, which has no filesystem.
+ * Harvested verbatim from the pre-Next Astro app (branch `dev`,
+ * apps/web/astro.config.mjs) — it is the payoff of a long debugging arc
+ * around Satori/workers-og and should not be re-derived.
+ */
+function rawFonts(extensions) {
+  return {
+    name: "vite-plugin-raw-fonts",
+    enforce: "pre",
+    resolveId(id, importer) {
+      if (extensions.some((ext) => id.includes(ext))) {
+        if (id.startsWith(".")) {
+          return path.resolve(path.dirname(importer), id);
+        }
+        return id;
+      }
+    },
+    load(id) {
+      if (extensions.some((ext) => id.includes(ext))) {
+        const buffer = fs.readFileSync(id);
+        return `export default new Uint8Array([${Array.from(buffer).join(",")}]);`;
+      }
+    },
+  };
+}
+
+export default defineConfig({
+  site: process.env.SITE_URL ?? "https://codingcat.dev",
+  output: "server",
+  adapter: cloudflare({
+    // Images are Sanity CDN URLs already transformed by @sanity/image-url;
+    // do not route them through Cloudflare Images.
+    imageService: "passthrough",
+    platformProxy: { enabled: true },
+  }),
+  integrations: [react()],
+  redirects: {
+    "/blog/page": "/blog",
+    "/podcasts/page": "/podcasts",
+    "/authors/page": "/authors",
+    "/guests/page": "/guests",
+    "/sponsors/page": "/sponsors",
+  },
+  vite: {
+    plugins: [tailwindcss(), rawFonts([".ttf", ".otf"])],
+    assetsInclude: ["**/*.wasm"],
+  },
+});

apps/site/baseline/blog_rss.json

@@ -0,0 +1,7 @@
+User-Agent: *
+Allow: /
+Disallow: /api/
+Disallow: /dashboard/
+
+Host: https://codingcat.dev
+Sitemap: https://codingcat.dev/sitemap.xml