website: update for /welcome → 301 → /welcome.pdf

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

reference/website.md

@@ -10,15 +10,18 @@ bucket `thelonglakelodge.com`, ArgoCD reconciles Traefik Ingress + cert.
 <welcome-packet>
 ## Welcome packet PDF (`/welcome`)
 
-URL `https://www.thelonglakelodge.com/welcome/` → meta-refresh + JS
-`location.replace()` → `welcome.pdf` (browser's native PDF viewer renders
-the file). Unlisted (`noindex,nofollow`), not in nav.
+`https://www.thelonglakelodge.com/welcome` is a real HTTP 301 redirect to
+`/welcome.pdf` (browser renders the PDF in its native viewer). Unlisted, not
+in nav.
 
-The PDF lives in Garage S3 **only**, NOT in git:
-- S3 key: `s3://thelonglakelodge.com/welcome/welcome.pdf`
-- Public URL: `https://www.thelonglakelodge.com/welcome/welcome.pdf`
-- Preserved across site-publish runs via `excludes:` in `site.yaml`
-  (the `--exclude` flag was added to `action/site-publish` for this case).
+Both objects live in the Garage S3 bucket only, NOT in git:
+- `s3://thelonglakelodge.com/welcome` — empty object with
+  `x-amz-website-redirect-location: /welcome.pdf` and `content-type: text/html`
+- `s3://thelonglakelodge.com/welcome.pdf` — the PDF itself
+
+Preserved across site-publish runs via `excludes: [welcome, welcome.pdf]` in
+`site.yaml` (the `--exclude` flag was added to `action/site-publish` for this
+case).
 
 ### Update the packet
 
@@ -26,9 +29,19 @@ One command — change is live immediately, no git/CI involved:
 
 ```sh
 aws --profile sjc001 s3 cp /path/to/new.pdf \
-  s3://thelonglakelodge.com/welcome/welcome.pdf \
+  s3://thelonglakelodge.com/welcome.pdf \
   --content-type application/pdf
 ```
 
+### Recreate the /welcome redirect (rarely needed)
+
+```sh
+aws --profile sjc001 s3api put-object \
+  --bucket thelonglakelodge.com \
+  --key welcome \
+  --website-redirect-location /welcome.pdf \
+  --content-type text/html
+```
+
 The `sjc001` aws-cli profile is documented in fritzlab `garage.md`.
 </welcome-packet>