docs: reconcile to as-built (ADR-0008, deploy runbook); clean text hero on detail pages

- ADR-0008: private package, External-Secrets pull over public HTTPS (no k3s restart);
  CI auth via CI_TOKEN PAT; Playwright dropped from CI. Marks ADR-0007 partially superseded.
- gitops-deployment-strategy + deployment.md updated to as-built flow + operate/troubleshoot runbook
- content-deviations: detail-page heroes are text-only (no image)
- service/focus detail pages: clean text hero (drop shared photo/icon)

docs/content-deviations.md

@@ -17,6 +17,15 @@ migration to Markdown collections (ADR-0002).
   Areas" section — the only live copy that exists for these (the live `/focus-areas/` page is empty).
   No additional copy was invented.
 
+## Detail-page heroes — no hero image (2026-07-17)
+
+- Service and focus-area **detail** pages use a **clean text hero** (eyebrow + title), **no hero
+  image**. This matches the originals, which had no hero photo on those pages. An interim version
+  put a shared photo (looked repetitive) then the per-service 64px icon (too small / orphaned) — both
+  rejected; the text hero is the final call. Service **icons remain on the `/services/` overview
+  cards**, at their intended small size. The `/services/`, `/focus-areas/`, and About pages keep
+  their real photos.
+
 ## Metadata (not visible body copy)
 
 - **SEO meta descriptions** (`description` frontmatter, 120–158 chars) are newly written marketing