fix(seo): repair main's gitleaks failure; drop docs.webhook.co from IndexNow

[choraria]

🔴 First: main is red, and I caused it

main is currently failing gitleaks at 74e921ed (#782). Root cause:

In #782 I put // gitleaks:allow on the lines above the INDEXNOW_KEY constant. That does nothing — the directive must sit on the same line as the finding. #782 went green only because the .gitleaksignore fingerprint covered its branch commit, and a squash-merge mints a new commit SHA, so the suppression evaporated the moment it landed.

.gitleaksignore's own header warns that fingerprints are commit-bound and break on rebase. The squash case is the same trap, and it is now written down there.

Fix: directive moved onto the line, plus a fingerprint for the squash commit now frozen in main's history. Both are needed — the directive for any future commit touching the line, the fingerprint for the one already written.

Verified with the gitleaks CLI locally, reproducing RED on the old tree first and confirming clean after — not by watching the check flip colour. I also isolated which change does the work: with the directive present my commit's diff re-adds the key line and the scan is clean, which could not happen if the same-line form didn't work.

Second: docs.webhook.co dropped from IndexNow

The docs key file shipped in #782 as a deliberate experiment — Mintlify documents .txt as Enterprise-only, so this was unknown rather than assumed. Measured after deploy:

Host	GET /<key>.txt
www.webhook.co	200, serves the key ✅
docs.webhook.co	404 Asset not found ❌

So docs cannot host a key file and apps/docs/<key>.txt was dead weight. Removed, and docs dropped from SITEMAP_FOR_HOST and the test's KEY_FILE_DIRS with a comment recording why, so nobody repeats the experiment.

Consequence worth flagging: Bing coverage for the 150 docs URLs now depends entirely on the Bing Webmaster Tools GSC import, which needs no key file. That raises its priority from optional to the only route.

Status of the submission

www.webhook.co: 36 URLs submitted, HTTP 202 (accepted). Unaffected by this PR.

Test plan

• Local gitleaks CLI: RED before, clean after.
• 25 tests pass; CLI refuses docs.webhook.co cleanly and www --dry-run still resolves 36 URLs.

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
webhook-co	🟢 Ready	View Preview	Jul 23, 2026, 2:50 PM

💡 Tip: Enable Workflows to automatically generate PRs for you.