Dedupe Caddyfile with snippets, sync docs with reality, add tests/check.sh

- Caddyfile: extract repeated header blocks into (noindex)/(crawler_bypass)
  snippets (adapted JSON verified byte-identical to previous config)
- CLAUDE.md: add mosquitone-admin/microblog to repos table; document that
  proxy auth is disabled (PROXY_NO_AUTH=1) with JP-only IP filter instead
- Deploy.md/caddy/README.md: reflect all-service deploy and forward proxy
- tests/check.sh: shell/python syntax, repos.txt<->hooks<->sessions.txt
  consistency, app.py COMMANDS vs run-command.sh whitelist, secrets check

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

1 files changed, 15 insertions, 17 deletions

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index d5624c5..90abecb 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -2,46 +2,45 @@
     order forward_proxy before redir
 }
 
-golive.yyamashita.com {
+(noindex) {
     header Referrer-Policy "no-referrer"
     header X-Robots-Tag "noindex, nofollow"
+}
 
+(crawler_bypass) {
     @crawler_bypass header X-Crawler-Access "f9a3c1e847b2d056"
     header @crawler_bypass -X-Robots-Tag
+}
 
+golive.yyamashita.com {
+    import noindex
+    import crawler_bypass
     reverse_proxy tokyo-app:3000
 }
 
 whoisband.yyamashita.com {
-    header Referrer-Policy "no-referrer"
-    header X-Robots-Tag "noindex, nofollow"
-
-    @crawler_bypass header X-Crawler-Access "f9a3c1e847b2d056"
-    header @crawler_bypass -X-Robots-Tag
-
+    import noindex
+    import crawler_bypass
     reverse_proxy whois-app:3000
 }
+
 code.yyamashita.com {
-    header Referrer-Policy "no-referrer"
-    header X-Robots-Tag "noindex, nofollow"
+    import noindex
     reverse_proxy 172.19.0.1:8080
 }
 
 git.yyamashita.com {
-    header Referrer-Policy "no-referrer"
-    header X-Robots-Tag "noindex, nofollow"
+    import noindex
     reverse_proxy cgit:80
 }
 
 hetzner-admin.yyamashita.com {
-    header Referrer-Policy "no-referrer"
-    header X-Robots-Tag "noindex, nofollow"
+    import noindex
     reverse_proxy hetzner-admin:5000
 }
 
 blog.yyamashita.com {
-    header Referrer-Policy "no-referrer"
-    header X-Robots-Tag "noindex, nofollow"
+    import noindex
     reverse_proxy microblog-app:3000
 }
 
@@ -51,8 +50,7 @@ vpn.yyamashita.com {
     tls {
         key_type rsa4096
     }
-    header Referrer-Policy "no-referrer"
-    header X-Robots-Tag "noindex, nofollow"
+    import noindex
     route /ca.pem {
         header Content-Type "application/x-pem-file"
         header Content-Disposition "attachment; filename=\"vpn-ca.pem\""