Decided: consolidate. DNSSEC is currently ON (registrar Squarespace). Reversible first step (disable DNSSEC) is ready on your go; cutover run as a focused, supervised op so your email never bounces.
Run the deploy command Claude gave you. Once live at david-todo.pages.dev there is no more download-and-open. It publishes today's snapshot; re-run to refresh until auto-redeploy is wired.
False alarm. Production was already clean (routes through your Worker proxy, no key). The flagged files were stale local copies, now archived. Nothing to deploy.
You checked Credit Journey and found no triggering activity. Closed.
You already responded twice; same tracked request. Awaiting their confirmation. No action.
K3 is listed on OpenRouter, but that just proxies to Moonshot's China endpoint, so it does NOT meet your no-China goal. Watching for the open weights (~Jul 27) or a true Western host. Web check confirmed working.