Rebrand to NaN community — v1 landing with waitlist

Full rebranding from the v0 subscription scaffold to v1: a closed
community landing page with passive waitlist, no payments yet.

v0 removal:
- Delete magic-link auth, session middleware, login/verify flows
- Delete Stripe checkout + webhooks, Discord OAuth2 link, email/Resend
- Delete D1 + Drizzle schema and migrations
- Delete portal pages (benefits, cron, members count)
- Trim package.json deps and .env.example to the waitlist-only surface

v1 landing:
- Hero with live "X of 25 seats remaining" counter read from KV
- About, Server (hardware/stack/garantías), ModelVoting, Founder,
  Pricing (single 70€/mes tier), FAQ accordion, CTA + WaitlistForm
- Dark minimalist design, JetBrains Mono + Inter, violet accents,
  motion-reduce support, focus-visible rings, WCAG-correct ARIA

Waitlist backend:
- Cloudflare KV namespace (WAITLIST) bound in wrangler.jsonc
- /api/waitlist POST with JSON-only content type check
- Strict input validation: ReDoS-safe email regex, 254 char email cap,
  100 char handle cap, HTML-dangerous char blacklist for handles
- Honeypot `_hp` field trap (returns 200 without persisting)
- Per-IP rate limit (60s TTL) via KV, using trustable cf-connecting-ip
  only (no x-forwarded-for fallback to prevent bypass)
- Idempotent dedupe on main + overflow buckets
- MAX_SEATS=25 with overflow status for late signups
- Opaque server errors, no PII in logs

Islands:
- WaitlistForm (client:load) — Preact form with client-side validation,
  honeypot short-circuit, typed error codes, success/overflow states
- FaqAccordion (client:visible) — one-at-a-time accordion with correct
  aria-expanded/aria-controls semantics

Rendering:
- index.astro in SSR mode to read KV counter server-side via the
  `cloudflare:workers` env import (Astro.locals.runtime.env was
  removed in Astro v6 and throws on access)
- All other sections static, zero unnecessary JS

Testing + tooling:
- 69 Vitest tests across src/tests/lib, src/tests/api, and the
  landing helpers (kept out of src/pages to avoid route bundling)
- Build script hardened to `astro check && astro build` so type
  errors fail CI (caught a latent Hero counter bug during rollout)
- Base layout ships CSP via meta (pre-prod follow-up: move to headers)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: barckcode

.env.example

@@ -1,24 +1,2 @@
-# Stripe
-STRIPE_SECRET_KEY=sk_test_...
-STRIPE_WEBHOOK_SECRET=whsec_...
-STRIPE_PRICE_EARLY=price_...
-STRIPE_PRICE_STANDARD=price_...
-
-# Discord
-DISCORD_CLIENT_ID=
-DISCORD_CLIENT_SECRET=
-DISCORD_BOT_TOKEN=
-DISCORD_GUILD_ID=
-DISCORD_MEMBER_ROLE_ID=
-
-# Email
-RESEND_API_KEY=re_...
-
-# Auth
-SESSION_SECRET=
-
-# Cron
-CRON_SECRET=
-
 # App
 PUBLIC_URL=http://localhost:4321

astro.config.mjs

@@ -11,6 +11,16 @@ export default defineConfig({
   adapter: cloudflare(),
   integrations: [preact()],
 
+  // We do not use Astro sessions in v1 (no auth). The Cloudflare adapter
+  // otherwise auto-enables a KV-backed session driver and tries to inject a
+  // "SESSION" KV binding into the generated wrangler config. Pointing the
+  // session driver at `unstorage/drivers/null` disables it cleanly.
+  session: {
+    driver: {
+      entrypoint: 'unstorage/drivers/null',
+    },
+  },
+
   vite: {
     plugins: [tailwindcss()]
   }