docs: reconcile to as-built (ADR-0008, deploy runbook); clean text hero on detail pages

- ADR-0008: private package, External-Secrets pull over public HTTPS (no k3s restart);
  CI auth via CI_TOKEN PAT; Playwright dropped from CI. Marks ADR-0007 partially superseded.
- gitops-deployment-strategy + deployment.md updated to as-built flow + operate/troubleshoot runbook
- content-deviations: detail-page heroes are text-only (no image)
- service/focus detail pages: clean text hero (drop shared photo/icon)

docs/adr/0007-gitea-actions-and-packages.md

@@ -3,6 +3,12 @@
 **Status:** Accepted — 2026-07-15 · **Supersedes** the GitHub Actions + GHCR specifics of
 [ADR-0001](0001-gitops-with-argocd.md) (the ArgoCD/GitOps model itself stands).
 
+> ⚠️ **Partially superseded by [ADR-0008](0008-private-package-external-secrets-pull.md).** The
+> registry-visibility (public → **private**), image-pull path (registries.yaml/k3s-restart →
+> **public-HTTPS pull, no restart**), CI auth (auto token → **`CI_TOKEN` PAT**), and pipeline
+> (**Playwright e2e removed from CI**) below were changed once built. The "CI on Gitea Actions,
+> images in Gitea Packages" core still holds. Read ADR-0008 for the as-built details.
+
 ## Context
 
 The repo lives on the homelab's self-hosted **Gitea** (`bmr_bluecap/bcs-website`), not GitHub, so