v0.41.0: default push_policy to trunk; docs SEO and consistency pass

- PushPolicy defaults to trunk; config/config.toml and the config init
  skeleton ship trunk with [git] push_auth = "none" (local / trusted
  networks only). Deployments that omit push_policy now boot as trunk and
  must set git.push_auth, or set push_policy = "review" explicitly.
- New config/config-review.toml carries the review sample; IT helpers,
  the authz kill-switch script, Dockerfile.it-runtime and the IT compose
  mega2 service use it. The isolated test config opts into review.
- Docs: Mega2-prefixed titles, aligned zh/en indexes and contributing
  guides, (Chinese) markers on Chinese-only links, README doc table and
  homepage, llms.txt, simplified Chinese for debug-oom, refactoring/libra
  and compose comments; default-review wording updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qa6PchiiAWXNwtxmm5KRTt

Author: genedna

Cargo.lock

@@ -1,9 +1,10 @@
 [package]
 name = "mega2"
-version = "0.40.15"
+version = "0.41.0"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 description = "Monorepo engine and Git hosting server for AI agents: trunk-based storage, Git Smart HTTP, Git LFS, OCI registry, and Agent Session Capture"
+homepage = "https://gitmega.ai"
 repository = "https://github.com/gitmono-dev/mega2"
 keywords = ["monorepo", "git-server", "ai-agents", "git-lfs", "oci-registry"]
 # Two [[bin]] targets exist; keep `cargo run -p mega2` unambiguous.

Cargo.toml

@@ -20,7 +20,7 @@ RUN apt-get update \
     && rm -rf /var/lib/apt/lists/*
 
 COPY mega2.itbin /usr/local/bin/mega2
-COPY config/config.toml /etc/mega2/config.toml
+COPY config/config-review.toml /etc/mega2/config.toml
 RUN chmod 755 /usr/local/bin/mega2
 
 ENV MEGA_BASE_DIR=/var/lib/mega2 \

Dockerfile.it-runtime

@@ -6,6 +6,7 @@ English · [中文](README.zh.md)
 
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT%20OR%20Apache--2.0-blue.svg)](#license)
 [![Docker Image](https://img.shields.io/badge/docker-genedna%2Fmega2-2496ED.svg)](https://hub.docker.com/r/genedna/mega2)
+[![Website](https://img.shields.io/badge/website-gitmega.ai-0A7BBB.svg)](https://gitmega.ai)
 
 The first-generation [Mega](https://github.com/web3infra-foundation/mega) established the foundation for our monorepo and Git-hosting platform. **Mega2 is the second-generation engine built for AI agents**, with two core capabilities: a **Monorepo engine** and **Agent Session Capture**.
 
@@ -18,6 +19,7 @@ Start with the [Quick Start](docs/quick-start.md), then see the [documentation i
 | Item | Details |
 |---|---|
 | What it is | Monorepo engine and Git hosting server for AI agents |
+| Website | [gitmega.ai](https://gitmega.ai) |
 | Language | Rust (edition 2024), a single Cargo package `mega2` |
 | Mode | Trunk / storage-only: `refs/heads/main` is the public trunk |
 | Protocols and interfaces | Git Smart HTTP, read-only SSH, Git LFS, OCI Distribution (`/v2`), HTTP API |
@@ -68,7 +70,7 @@ docker compose -f macos-orbstack-mega2-compose.yml up -d --wait
 docker compose -f linux-mega2-compose.yml up -d --wait
 ```
 
-HTTP: `http://127.0.0.1:9000/`. This is a local-only anonymous setup (`push_auth=none`, bound to `127.0.0.1`); for token-based or shared deployments see the [Deployment Guide](docs/deployment.md) and [`docs/deploy-trunk.md`](docs/deploy-trunk.md). Start and push with the [Quick Start](docs/quick-start.md), then see [Usage Recipes](docs/recipes.md) for repository migration, LFS, OCI, and build-artifact examples.
+HTTP: `http://127.0.0.1:9000/`. This is a local-only anonymous setup (`push_auth=none`, bound to `127.0.0.1`); for token-based or shared deployments see the [Deployment Guide](docs/deployment.md) and [`docs/deploy-trunk.md`](docs/deploy-trunk.md) (Chinese). Start and push with the [Quick Start](docs/quick-start.md), then see [Usage Recipes](docs/recipes.md) for repository migration, LFS, OCI, and build-artifact examples.
 
 For local development and tests, see the [Contributing Guide](docs/contributing.md).
 
@@ -98,7 +100,7 @@ cargo clippy --all-targets --all-features -- -D warnings
 source .env.test && cargo test --all
 ```
 
-Details: [`AGENTS.md`](AGENTS.md), the [Contributing Guide](docs/contributing.md), and [`docs/plan/README.md`](docs/plan/README.md).
+Details: [`AGENTS.md`](AGENTS.md), the [Contributing Guide](docs/contributing.md), and [`docs/plan/README.md`](docs/plan/README.md) (Chinese).
 
 ## Documentation
 
@@ -108,9 +110,12 @@ Details: [`AGENTS.md`](AGENTS.md), the [Contributing Guide](docs/contributing.md
 | [`docs/quick-start.md`](docs/quick-start.md) | Start the local Compose stack and make your first push |
 | [`docs/recipes.md`](docs/recipes.md) | Repository migration, LFS, OCI, artifacts, and persistent data |
 | [`docs/user-guide.md`](docs/user-guide.md) | Git, HTTP API, Libra, and CLI usage |
+| [`docs/configuration.md`](docs/configuration.md) | Config sources, SecretRef, profiles, hot reload, and validation |
+| [`docs/deployment.md`](docs/deployment.md) | Deploying and hardening a trunk / storage-only service |
+| [`docs/architecture.md`](docs/architecture.md) | Module boundaries, storage, and the write path |
 | [`docs/contributing.md`](docs/contributing.md) | Local development, contribution process, code conventions, and integration tests |
 
-Configuration, deployment, architecture, and subsystem references are linked from the [documentation index](docs/README.md).
+Subsystem references and project records are linked from the [documentation index](docs/README.md).
 
 ## License
 

README.md

@@ -6,6 +6,7 @@
 
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT%20OR%20Apache--2.0-blue.svg)](#许可证)
 [![Docker Image](https://img.shields.io/badge/docker-genedna%2Fmega2-2496ED.svg)](https://hub.docker.com/r/genedna/mega2)
+[![Website](https://img.shields.io/badge/website-gitmega.ai-0A7BBB.svg)](https://gitmega.ai)
 
 第一代 [Mega](https://github.com/web3infra-foundation/mega) 奠定了 monorepo 与 Git 托管平台的基础。**Mega2 是面向 Agent 的第二代引擎**，以 **Monorepo 引擎**和 **Agent Session Capture（Agent 会话捕获）**为两项核心能力。
 
@@ -18,6 +19,7 @@ Mega2 开源版以 **trunk / storage-only** 模式运行，不提供 Web UI 或
 | 项目 | 说明 |
 |---|---|
 | 定位 | 面向 AI Agent 的 monorepo 引擎与 Git 托管服务端 |
+| 主页 | [gitmega.ai](https://gitmega.ai) |
 | 语言 | Rust（edition 2024），单个 Cargo 包 `mega2` |
 | 运行模式 | trunk / storage-only：公开主干为 `refs/heads/main` |
 | 协议与接口 | Git Smart HTTP、只读 SSH、Git LFS、OCI Distribution（`/v2`）、HTTP API |
@@ -108,9 +110,12 @@ source .env.test && cargo test --all
 | [`docs/quick-start.zh.md`](docs/quick-start.zh.md) | 启动本地 Compose 栈并完成首次推送 |
 | [`docs/recipes.zh.md`](docs/recipes.zh.md) | 仓库迁移、LFS、OCI、产物和数据持久化示例 |
 | [`docs/user-guide.zh.md`](docs/user-guide.zh.md) | Git、HTTP API、Libra 和 CLI 使用说明 |
+| [`docs/configuration.zh.md`](docs/configuration.zh.md) | 配置来源、SecretRef、Profile、热加载与校验 |
+| [`docs/deployment.zh.md`](docs/deployment.zh.md) | 部署与加固 trunk / storage-only 服务 |
+| [`docs/architecture.zh.md`](docs/architecture.zh.md) | 模块边界、数据存储与写入流程 |
 | [`docs/contributing.zh.md`](docs/contributing.zh.md) | 本地开发、贡献流程、代码约定与集成测试 |
 
-配置、部署、架构和子系统参考文档见[文档索引](docs/README.zh.md)。
+子系统参考与项目记录见[文档索引](docs/README.zh.md)。
 
 ## 许可证