Moves the files that both didbot's tests and its deployment read into a new deploy/ directory: the pds config template, and each site's Content-Security-Policy and CloudFront viewer-request function. Each CSP is now a JSON list of directives, which the site builds, their tests and the stacks all read.
The infra/ stacks read these files from deploy/. The rendered config, headers and functions are byte-identical. didbot-infra's stacks copy deploy/<stack>/ at a pinned commit, so this lands before they can pin.
🤖 Generated with Claude Code