Fix catalog book links and rewrite PDF destinations to live HTTPS.

Module and model book cards now point at generated index.html/index.pdf
instead of directory URLs that 404. WeasyPrint file:// annotations are
mapped to https://zapier.georgelambert.org/ paths that exist. Developer
module, architecture, and research snapshot links target published files.

packages/verae-ops/caddy/zapier.georgelambert.org.caddy

@@ -0,0 +1,19 @@
+# Docs catalog. DNS: zapier.georgelambert.org → 70.88.205.138
+# rsync target: /SSD2/sites/zapier.georgelambert.org
+
+http://zapier.georgelambert.org {
+	redir https://zapier.georgelambert.org{uri} permanent
+}
+
+zapier.georgelambert.org {
+	root * /SSD2/sites/zapier.georgelambert.org
+	encode gzip zstd
+	file_server {
+		index index.html index.pdf README.html README.pdf
+	}
+	try_files {path} {path}/index.html {path}/index.pdf {path}/README.html {path}/README.pdf
+	header {
+		X-Content-Type-Options nosniff
+		Referrer-Policy strict-origin-when-cross-origin
+	}
+}