Add live HTTPS door cards and screenshots to the catalog.

Homepage bottom of zapier.georgelambert.org lists each public
service with a description, screenshot, and link. UI-REVIEW.pdf
and the walkthrough document those doors.

packages/ui-docs/WALKTHROUGH.md

@@ -125,3 +125,39 @@ Dashboard: API key is **masked**. **Reveal**, **Copy** (full key to clipboard),
 **https://zapier.georgelambert.org/** — system-ui on the indigo header (not Georgia).
 
 ![Catalog](screenshots/22-catalog.png)
+
+## 13. Live HTTPS doors (NS1)
+
+Public names on **NS1.GEORGELAMBERT.ORG** with Let's Encrypt. Caddy file: `packages/verae-ops/caddy/zapier-services.georgelambert.org.caddy`. NATS, keep, and archive workers stay on loopback.
+
+| Door | URL |
+|------|-----|
+| Customer portal | https://portal.zapier.georgelambert.org/portal/ |
+| Customer API | https://api.zapier.georgelambert.org/ |
+| S2S leaf | https://leaf.zapier.georgelambert.org/ |
+| Zapier plane | https://zap.zapier.georgelambert.org/ |
+| Staff plane | https://staff.zapier.georgelambert.org/ |
+| Staff IAM | https://iam.zapier.georgelambert.org/ |
+| Staff session | https://login.zapier.georgelambert.org/ |
+| Customer service | https://cs.zapier.georgelambert.org/ |
+| Sales | https://sales.zapier.georgelambert.org/ |
+| Accounting | https://acct.zapier.georgelambert.org/ |
+| Middleware | https://mw.zapier.georgelambert.org/ |
+| Operator console | https://fleet.zapier.georgelambert.org/ |
+| This catalog | https://zapier.georgelambert.org/ |
+| Forgejo | https://git.georgelambert.org/ |
+
+Staff HTML redirects to IAM login (`https://iam.zapier.georgelambert.org/login?next=…`).
+
+![Portal live](screenshots/live/portal.png)
+
+![IAM live](screenshots/live/iam.png)
+
+![Fleet live](screenshots/live/fleet.png)
+
+![Zapier plane live](screenshots/live/zap.png)
+
+![CS live](screenshots/live/cs.png)
+
+![Catalog live](screenshots/live/docs.png)
+