[sh1pt-actions-fleet]

Summary

• Add a public blog index and a troubleshooting guide for missing SMS verification codes.
• Explain number format, delayed delivery, provider acceptance, private inboxes, and account recovery limits.
• Add tracked rent-number links, public navigation, canonical metadata, and sitemap entries.

Verification

• bun run typecheck
• bun run lint (passes with four pre-existing warnings)
• bun run test (61 files, 366 tests passed)
• bun run build
• Local production server rendered the guide with HTTP 200.

[github-actions]

ThreatCrush Security Scan

14 finding(s)

HIGH/CRITICAL: 2 | MEDIUM: 4 | LOW: 8

Severity	Rule	Location
HIGH	sh-unquoted-expansion-destructive	public/install.sh:67
HIGH	sh-remote-script-execution	public/install.sh:89
MEDIUM	sh-remote-script-execution	public/install.sh:133
MEDIUM	js-open-redirect	src/app/numbers/page.tsx:180
MEDIUM	js-open-redirect	src/components/inbox-client.tsx:35
MEDIUM	js-unescaped-html-sink	src/components/pit-footer.tsx:17
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:24
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:46
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:60
LOW	secret-generic-credential	src/lib/providers/__tests__/twilio.test.ts:78
LOW	secret-generic-credential	src/lib/vault/__tests__/vault.test.ts:117
LOW	secret-generic-credential	src/lib/webhooks/__tests__/supabase-store.test.ts:11
LOW	secret-generic-credential	supabase/config.toml:287
LOW	secret-generic-credential	supabase/config.toml:319

Snippets are redacted; ThreatCrush never prints matched credential material.