Add the project website at askkey.sudohg.com

[sudoHG]

Refs #160. Adds the bilingual one-page website and the Pages workflow. The issue stays open until Pages and DNS are set up (step 4) and the acceptance check against https://askkey.sudohg.com passes.

What's in it

• site/: English at /, Simplified Chinese at /zh/. Sections: hero, "How it works" film, permissions (Allow / Ask every time / Hidden as seals), clients, limits, download. Static HTML and CSS plus motion.js for the seal stamping, the client lines and the hanging access card.
• site-src/how/: readable source of the film (three.js r186, MIT, bundled with esbuild into site/how/how.js, licence shipped next to it). npm run build also stamps content hashes onto the CSS and JS URLs so a new page never pairs with a cached old script. See site-src/how/README.md.
• .github/workflows/pages.yml: deploys site/ on pushes to main that touch site/; actions pinned to commit SHAs.
• scripts/check_hygiene.py: allows Chinese in the two pages. README.md and README.zh-CN.md link to the site.

Deviations from the issue, approved by the maintainer in session

• Step 3 (recorded demo) is replaced by the real-time film; the hero is a still photograph with the "准" seal.
• The download button links to releases/latest/download/AskKey.dmg, which every release publishes since Publish stable-named release assets for direct downloads #165; no version number is hard-coded. A smaller link goes to the releases page.
• The clients section names eight further MCP tools (Claude Desktop, VS Code, Kiro, Trae, Windsurf, Qwen Code, Zed, Cline) as "by hand" clients. They come from the README's "Other MCP clients" path and each tool's own MCP docs; none was tested with Ask Key. Names only, no third-party logos. Grok is named "Grok Build", xAI's name for the grok CLI that Ask Key connects to.

Fonts and images

Shipped fonts: Hanken Grotesk and IBM Plex Mono (Latin-1, unmodified), OFL, licences in site/fonts/. System fonts are only named in CSS. Every image with text (seals, No-WebGL posters, share images) is set in open fonts only (Source Han Serif/Sans, Hanken Grotesk).

Evidence

• python3 scripts/check_hygiene.py: passed. python3 scripts/check_module_deps.py: passed.
• External URLs in site/: only href links to github.com/sudoHG and askkey.sudohg.com, plus www.w3.org namespaces; the bundle also contains one citation URL inside a three.js shader comment string. No external src, url() or @import.
• Headless Chrome, both pages: no horizontal scrolling and no page errors at 375, 768, 1280 and 1920 px; every request goes to the site's own host, no 4xx.
• Also checked at 360, 393, 412, 440, 744, 820, 1032 (portrait tablets) and 1180, 1376 (landscape tablets): download button on the first screen everywhere, upright film on phones and portrait tablets.
• Real devices: the maintainer checked iPhone Safari over the LAN and Safari on the Mac.

After merge (maintainer)

1. Settings → Pages: source GitHub Actions, custom domain askkey.sudohg.com, enforce HTTPS.
2. Cloudflare: CNAME askkey -> sudohg.github.io, DNS only.