create mvp path

DEPLOY.md

@@ -4,10 +4,11 @@ A first, shareable deployment of the whole stack under **balinyaar.ir**, in Dock
 Caddy reverse proxy that terminates TLS.
 
 > **This file is the deploy *procedure*.** The runtime dependency graph — every edge, what breaks when it is
-> down, and where it is configured — is [docs/integration/topology.md](docs/integration/topology.md), and
+> down, and where it is configured — is [archive/docs/integration/topology.md](archive/docs/integration/topology.md)
+> (archived reference, not actively maintained), and
 > every configuration key on both sides is
-> [docs/integration/config-matrix.md](docs/integration/config-matrix.md). Read those to answer "what talks
-> to what" or "where is this value set"; read this one to actually ship.
+> [archive/docs/integration/config-matrix.md](archive/docs/integration/config-matrix.md). Read those to answer
+> "what talks to what" or "where is this value set"; read this one to actually ship.
 
 | Host | Serves | Container |
 | --- | --- | --- |
@@ -37,8 +38,8 @@ machine is now inert and can be deleted. Every value lives in a file in the repo
 The placeholder string `SET_VIA_USER_SECRETS_OR_ENV` in the base `appsettings.json` names that removed
 store; the *name* is a historical artifact, kept only because it is the sentinel `StartupSecretsGuard`
 rejects. **The mechanism is appsettings files and environment variables** — see
-[docs/integration/config-matrix.md](docs/integration/config-matrix.md), which lists every key, its default,
-and who reads it.
+[archive/docs/integration/config-matrix.md](archive/docs/integration/config-matrix.md), which lists every key,
+its default, and who reads it.
 
 The API runs as **`ASPNETCORE_ENVIRONMENT=Development`**, so `appsettings.Development.json` is the file
 that actually loads. There is **no `appsettings.Production.json` in the repo at all**, and adding one would