diff --git a/src/components/docs/DocsQuickReference.astro b/src/components/docs/DocsQuickReference.astro
index ac74e8c..989e220 100644
--- a/src/components/docs/DocsQuickReference.astro
+++ b/src/components/docs/DocsQuickReference.astro
@@ -8,9 +8,9 @@ const { label, items } = Astro.props;
 ---
 
 <div class="rounded-xl border border-border bg-surface-tertiary p-5">
-  <h3 class="mb-4 font-primary text-[11px] font-semibold tracking-[0.8px] text-primary">
+  <div class="mb-4 font-primary text-[11px] font-semibold tracking-[0.8px] text-primary">
     {label}
-  </h3>
+  </div>
   <div class="space-y-2 font-mono text-[13px] text-foreground">
     {items.map((item, idx) => (
       <div>{String(idx + 1).padStart(2, "0")} &nbsp; {item}</div>
diff --git a/src/content/docs/agent-game-protocols.mdx b/src/content/docs/agent-game-protocols.mdx
index 38ec82c..82e13a3 100644
--- a/src/content/docs/agent-game-protocols.mdx
+++ b/src/content/docs/agent-game-protocols.mdx
@@ -122,9 +122,9 @@ Module capabilities are the contract between the operator and the agent. To add
 <DocsQuickReference
   label="AGENT CONTRACT"
   items={[
-    "01  cd agent && go test ./...",
-    "02  agent/openapi.yaml   # contract source",
-    "03  GET /healthz · GET /metrics · WSS /console",
+    "cd agent && go test ./...",
+    "agent/openapi.yaml   # contract source",
+    "GET /healthz · GET /metrics · WSS /console",
   ]}
 />
 
diff --git a/src/content/docs/air-gapped-installation.mdx b/src/content/docs/air-gapped-installation.mdx
index 4d031b0..d5a4352 100644
--- a/src/content/docs/air-gapped-installation.mdx
+++ b/src/content/docs/air-gapped-installation.mdx
@@ -350,9 +350,9 @@ If possible, disconnect the cluster from the public internet (or block all egres
 <DocsQuickReference
   label="OFFLINE ACCEPTANCE"
   items={[
-    "01  Mirror chart + images + modules + signatures + SBOMs by digest",
-    "02  Render offline; reject public hosts and mutable tags",
-    "03  Test install, server, backup, upgrade, rollback with egress blocked",
-    "04  Set api.telemetry.enabled=false (or an internal endpoint) so no report leaves the cluster",
+    "Mirror chart + images + modules + signatures + SBOMs by digest",
+    "Render offline; reject public hosts and mutable tags",
+    "Test install, server, backup, upgrade, rollback with egress blocked",
+    "Set api.telemetry.enabled=false (or an internal endpoint) so no report leaves the cluster",
   ]}
 />
diff --git a/src/content/docs/api-realtime-development.mdx b/src/content/docs/api-realtime-development.mdx
index 2fba442..b79a495 100644
--- a/src/content/docs/api-realtime-development.mdx
+++ b/src/content/docs/api-realtime-development.mdx
@@ -259,9 +259,9 @@ Run the test via `make test-integration`.
 <DocsQuickReference
   label="API CHANGE"
   items={[
-    "01  cd api && go test ./...",
-    "02  make test-integration",
-    "03  rg 'Mount|/ws/|/events' api/cmd api/internal",
+    "cd api && go test ./...",
+    "make test-integration",
+    "rg 'Mount|/ws/|/events' api/cmd api/internal",
   ]}
 />
 
diff --git a/src/content/docs/audit-observability-admin.mdx b/src/content/docs/audit-observability-admin.mdx
index f74bc4a..2aed073 100644
--- a/src/content/docs/audit-observability-admin.mdx
+++ b/src/content/docs/audit-observability-admin.mdx
@@ -57,9 +57,9 @@ Each sink is tested independently via the Dashboard form before saving. The API
 <DocsQuickReference
   label="INCIDENT EVIDENCE"
   items={[
-    "01  Record cluster, namespace, resource UID, time range, and actor when exporting audit records",
-    "02  Export audit records, Kubernetes events, API/operator logs, and backup status (if affected)",
-    "03  Test notification delivery and preserve version/build information for correlation",
+    "Record cluster, namespace, resource UID, time range, and actor when exporting audit records",
+    "Export audit records, Kubernetes events, API/operator logs, and backup status (if affected)",
+    "Test notification delivery and preserve version/build information for correlation",
   ]}
 />
 
diff --git a/src/content/docs/backup-destinations.mdx b/src/content/docs/backup-destinations.mdx
index 56d7028..c4286ef 100644
--- a/src/content/docs/backup-destinations.mdx
+++ b/src/content/docs/backup-destinations.mdx
@@ -190,9 +190,9 @@ kubectl get backupschedules -A -o jsonpath='{range .items[*]}{.metadata.name}{"\
 <DocsQuickReference
   label="DESTINATION ACCEPTANCE"
   items={[
-    "01  Reachable repository + labelled Secret in configured namespace",
-    "02  Add stable destination name + Secret/key reference",
-    "03  Manual backup + disposable restore before schedules depend on it",
+    "Reachable repository + labelled Secret in configured namespace",
+    "Add stable destination name + Secret/key reference",
+    "Manual backup + disposable restore before schedules depend on it",
   ]}
 />
 
diff --git a/src/content/docs/backup-repository-operations.mdx b/src/content/docs/backup-repository-operations.mdx
index fffd2b2..11f8270 100644
--- a/src/content/docs/backup-repository-operations.mdx
+++ b/src/content/docs/backup-repository-operations.mdx
@@ -169,9 +169,9 @@ This separation ensures that a compromised workload credential does not also com
 <DocsQuickReference
   label="REPOSITORY ACCEPTANCE"
   items={[
-    "01  Supported backend + least-privilege Secret + TLS/CA + key",
-    "02  Alert on failed/missed backup, locks, checks, prune, growth, expiry",
-    "03  Accept only after scheduled isolated restore meets RPO/RTO",
+    "Supported backend + least-privilege Secret + TLS/CA + key",
+    "Alert on failed/missed backup, locks, checks, prune, growth, expiry",
+    "Accept only after scheduled isolated restore meets RPO/RTO",
   ]}
 />
 
diff --git a/src/content/docs/backups-recovery.mdx b/src/content/docs/backups-recovery.mdx
index d4972e2..8d8bb9f 100644
--- a/src/content/docs/backups-recovery.mdx
+++ b/src/content/docs/backups-recovery.mdx
@@ -111,9 +111,9 @@ Restore into a new server for verification, or overwrite only after stopping wri
 <DocsQuickReference
   label="RESTORE CHECKLIST"
   items={[
-    "01  Verify source backup, checksum, destination, and available storage",
-    "02  Prefer a new server for validation; stop writes before overwrite",
-    "03  Start, inspect events and logs, then test world and player data",
+    "Verify source backup, checksum, destination, and available storage",
+    "Prefer a new server for validation; stop writes before overwrite",
+    "Start, inspect events and logs, then test world and player data",
   ]}
 />
 
diff --git a/src/content/docs/ci-releases-signing.mdx b/src/content/docs/ci-releases-signing.mdx
index 69801cc..33926e8 100644
--- a/src/content/docs/ci-releases-signing.mdx
+++ b/src/content/docs/ci-releases-signing.mdx
@@ -73,9 +73,9 @@ A `v` tag builds and signs images, packages the OCI chart, creates release notes
 <DocsQuickReference
   label="RELEASE PATH"
   items={[
-    "01  go build ./... && npx tsc --noEmit  # Lightweight local compile checks",
-    "02  git tag vX.Y.Z && git push origin vX.Y.Z",
-    "03  cosign verify --key cosign.pub ghcr.io/gameplanepanel/gameplane/<image>@<digest>",
+    "go build ./... && npx tsc --noEmit  # Lightweight local compile checks",
+    "git tag vX.Y.Z && git push origin vX.Y.Z",
+    "cosign verify --key cosign.pub ghcr.io/gameplanepanel/gameplane/<image>@<digest>",
   ]}
 />
 
diff --git a/src/content/docs/cluster-nodes-kubeconfig.mdx b/src/content/docs/cluster-nodes-kubeconfig.mdx
index c0bc918..2102445 100644
--- a/src/content/docs/cluster-nodes-kubeconfig.mdx
+++ b/src/content/docs/cluster-nodes-kubeconfig.mdx
@@ -151,9 +151,9 @@ Mint a short-lived token for the intended cluster, run the generated join proced
 <DocsQuickReference
   label="CLUSTER OPS"
   items={[
-    "01  Read version, Ready, roles, pressure, pods, CPU, memory",
-    "02  Kubeconfig requires clusterOps.enabled; handle as admin secret",
-    "03  Join token → Ready + labels/taints/capacity + test workload",
+    "Read version, Ready, roles, pressure, pods, CPU, memory",
+    "Kubeconfig requires clusterOps.enabled; handle as admin secret",
+    "Join token → Ready + labels/taints/capacity + test workload",
   ]}
 />
 
diff --git a/src/content/docs/cluster-storage.mdx b/src/content/docs/cluster-storage.mdx
index 8900e58..85ec7e3 100644
--- a/src/content/docs/cluster-storage.mdx
+++ b/src/content/docs/cluster-storage.mdx
@@ -75,9 +75,9 @@ Start with Kubernetes' built-in scheduler — it balances pods across nodes, res
 <DocsQuickReference
   label="CLUSTER PREFLIGHT"
   items={[
-    "01  Kubernetes and Helm supported; nodes Ready; DNS healthy",
-    "02  StorageClass present; expansion and reclaim policy understood",
-    "03  Ingress, certificates, load balancer, and backup destination tested",
+    "Kubernetes and Helm supported; nodes Ready; DNS healthy",
+    "StorageClass present; expansion and reclaim policy understood",
+    "Ingress, certificates, load balancer, and backup destination tested",
   ]}
 />
 
diff --git a/src/content/docs/console-events-logs.mdx b/src/content/docs/console-events-logs.mdx
index 3f65d50..e3b61e4 100644
--- a/src/content/docs/console-events-logs.mdx
+++ b/src/content/docs/console-events-logs.mdx
@@ -98,9 +98,9 @@ The game's primary log file is configured in the template's `spec.logPath` (e.g.
 <DocsQuickReference
   label="FAILED START TRIAGE"
   items={[
-    "01  Read Events for scheduling, image, volume, or probe failures",
-    "02  Follow container logs, then game logs when the process is ready",
-    "03  Export timestamps and context before restart or configuration changes",
+    "Read Events for scheduling, image, volume, or probe failures",
+    "Follow container logs, then game logs when the process is ready",
+    "Export timestamps and context before restart or configuration changes",
   ]}
 />
 
diff --git a/src/content/docs/contribution-design-workflow.mdx b/src/content/docs/contribution-design-workflow.mdx
index 0ad7471..06cb9d2 100644
--- a/src/content/docs/contribution-design-workflow.mdx
+++ b/src/content/docs/contribution-design-workflow.mdx
@@ -78,10 +78,10 @@ Compile and commit focused changes with sign-off; CI verifies the full test, lin
 <DocsQuickReference
   label="CI VERIFICATION GATE"
   items={[
-    "01  Compilation checks (go build ./..., npx tsc --noEmit) — run locally",
-    "02  make generate && make manifests — if CRD/schema changes",
-    "03  Full test, lint, e2e suite runs in CI after push",
-    "04  Pencil exports synced; submodule changes committed separately",
+    "Compilation checks (go build ./..., npx tsc --noEmit) — run locally",
+    "make generate && make manifests — if CRD/schema changes",
+    "Full test, lint, e2e suite runs in CI after push",
+    "Pencil exports synced; submodule changes committed separately",
   ]}
 />
 
diff --git a/src/content/docs/create-a-server.mdx b/src/content/docs/create-a-server.mdx
index 68752ac..94305d3 100644
--- a/src/content/docs/create-a-server.mdx
+++ b/src/content/docs/create-a-server.mdx
@@ -52,8 +52,8 @@ Pick a service model, validate every port, then watch the GameServer reconcile t
 <DocsQuickReference
   label="CREATE FLOW"
   items={[
-    "01  Choose ClusterIP, NodePort, or LoadBalancer",
-    "02  Confirm ports, hostname, annotations, and CIDRs",
-    "03  Review YAML, create, then follow events to Ready",
+    "Choose ClusterIP, NodePort, or LoadBalancer",
+    "Confirm ports, hostname, annotations, and CIDRs",
+    "Review YAML, create, then follow events to Ready",
   ]}
 />
diff --git a/src/content/docs/credential-rotation.mdx b/src/content/docs/credential-rotation.mdx
index ac121ac..79b76f2 100644
--- a/src/content/docs/credential-rotation.mdx
+++ b/src/content/docs/credential-rotation.mdx
@@ -121,8 +121,8 @@ Revoke compromised material, invalidate sessions, preserve evidence, and test th
 <DocsQuickReference
   label="ROTATION ORDER"
   items={[
-    "01  New issued → dual trust/distribution → consumer validation",
-    "02  Test login, API, DB, agents, modules, backups, webhooks",
-    "03  Old revoked only after recovery and retained data remain usable",
+    "New issued → dual trust/distribution → consumer validation",
+    "Test login, API, DB, agents, modules, backups, webhooks",
+    "Old revoked only after recovery and retained data remain usable",
   ]}
 />
diff --git a/src/content/docs/dashboard-tour.mdx b/src/content/docs/dashboard-tour.mdx
index 31b5be5..e29e75c 100644
--- a/src/content/docs/dashboard-tour.mdx
+++ b/src/content/docs/dashboard-tour.mdx
@@ -75,8 +75,8 @@ A healthy workflow moves from intent to reconciliation, then closes the loop wit
 <DocsQuickReference
   label="FIRST OPERATING LOOP"
   items={[
-    "01  Choose a cluster and namespace",
-    "02  Create a server from a verified module",
-    "03  Watch events, logs, metrics, and backups",
+    "Choose a cluster and namespace",
+    "Create a server from a verified module",
+    "Watch events, logs, metrics, and backups",
   ]}
 />
diff --git a/src/content/docs/database-configuration.mdx b/src/content/docs/database-configuration.mdx
index 9d34654..b241e9a 100644
--- a/src/content/docs/database-configuration.mdx
+++ b/src/content/docs/database-configuration.mdx
@@ -245,8 +245,8 @@ After restoring the database, verify:
 <DocsQuickReference
   label="DATABASE RUNBOOK"
   items={[
-    "01  Record engine/version, endpoint, TLS, Secret, schema, backup",
-    "02  Upgrade gate → backup + migration notes + connection headroom",
-    "03  Restore DB → matching release → validate schema, login, audit, settings",
+    "Record engine/version, endpoint, TLS, Secret, schema, backup",
+    "Upgrade gate → backup + migration notes + connection headroom",
+    "Restore DB → matching release → validate schema, login, audit, settings",
   ]}
 />
diff --git a/src/content/docs/database-migrations.mdx b/src/content/docs/database-migrations.mdx
index f82c541..5ccf539 100644
--- a/src/content/docs/database-migrations.mdx
+++ b/src/content/docs/database-migrations.mdx
@@ -181,9 +181,9 @@ Before committing a migration file:
 <DocsQuickReference
   label="MIGRATION LOOP"
   items={[
-    "01  api/internal/db/migrations/012_<description>.sql",
-    "02  cd api && go test ./internal/db",
-    "03  cd api && go test -tags postgres ./internal/db",
+    "api/internal/db/migrations/012_<description>.sql",
+    "cd api && go test ./internal/db",
+    "cd api && go test -tags postgres ./internal/db",
   ]}
 />
 
diff --git a/src/content/docs/extension-services.mdx b/src/content/docs/extension-services.mdx
index 01ef8a3..11bd7c6 100644
--- a/src/content/docs/extension-services.mdx
+++ b/src/content/docs/extension-services.mdx
@@ -135,9 +135,9 @@ Maintain an independent module, tests, image, chart opt-in, health/metrics, boun
 <DocsQuickReference
   label="EXTENSION CHECK"
   items={[
-    "01  go test ./... inside the extension module",
-    "02  make image-audit-syslog image-telemetry-receiver image-mcp-server",
-    "03  Update Makefile + CI/release + chart values/templates together",
+    "go test ./... inside the extension module",
+    "make image-audit-syslog image-telemetry-receiver image-mcp-server",
+    "Update Makefile + CI/release + chart values/templates together",
   ]}
 />
 
diff --git a/src/content/docs/file-manager.mdx b/src/content/docs/file-manager.mdx
index 1df4178..3474676 100644
--- a/src/content/docs/file-manager.mdx
+++ b/src/content/docs/file-manager.mdx
@@ -98,9 +98,9 @@ Apply one concern, restart only when required, and validate Events and game logs
 <DocsQuickReference
   label="SAFE FILE CHANGE"
   items={[
-    "01  Confirm breadcrumb and selected path",
-    "02  Save/stop and back up world or configuration data",
-    "03  Change one concern, restart if needed, validate logs, restore on failure",
+    "Confirm breadcrumb and selected path",
+    "Save/stop and back up world or configuration data",
+    "Change one concern, restart if needed, validate logs, restore on failure",
   ]}
 />
 
diff --git a/src/content/docs/gametemplate-schema.mdx b/src/content/docs/gametemplate-schema.mdx
index bbfb352..d9d3e4b 100644
--- a/src/content/docs/gametemplate-schema.mdx
+++ b/src/content/docs/gametemplate-schema.mdx
@@ -165,9 +165,9 @@ Key sub-specs:
 <DocsQuickReference
   label="TEMPLATE MODEL"
   items={[
-    "01  spec.versions[] → image/tag + loader compatibility",
-    "02  spec.configSchema[] → env/args/config files",
-    "03  spec.storage + probes + ports → rendered workload",
+    "spec.versions[] → image/tag + loader compatibility",
+    "spec.configSchema[] → env/args/config files",
+    "spec.storage + probes + ports → rendered workload",
   ]}
 />
 
diff --git a/src/content/docs/general-server-settings.mdx b/src/content/docs/general-server-settings.mdx
index b5e69f6..33e09bb 100644
--- a/src/content/docs/general-server-settings.mdx
+++ b/src/content/docs/general-server-settings.mdx
@@ -75,8 +75,8 @@ When you leave the image field blank, the server inherits the image selected by
 <DocsQuickReference
   label="IMAGE OVERRIDE"
   items={[
-    "01  Blank → inherit the installed template and selected version",
-    "02  Pin → repository + immutable tag/digest; save one change",
-    "03  Watch pull events, then verify game, files, ports, and backups",
+    "Blank → inherit the installed template and selected version",
+    "Pin → repository + immutable tag/digest; save one change",
+    "Watch pull events, then verify game, files, ports, and backups",
   ]}
 />
diff --git a/src/content/docs/high-availability.mdx b/src/content/docs/high-availability.mdx
index aa9505b..841b5f9 100644
--- a/src/content/docs/high-availability.mdx
+++ b/src/content/docs/high-availability.mdx
@@ -96,9 +96,9 @@ Drain or terminate one dependency at a time and measure:
 <DocsQuickReference
   label="HA TEST"
   items={[
-    "01  Replicate only components documented as replica-safe (Operator 2+; API stays at 1 with either database driver)",
-    "02  One domain loss (node/zone) leaves edge, control plane, database, storage, and capacity intact",
-    "03  Test leader loss, database crash, ingress restart, and node drain; record RTO/RPO",
+    "Replicate only components documented as replica-safe (Operator 2+; API stays at 1 with either database driver)",
+    "One domain loss (node/zone) leaves edge, control plane, database, storage, and capacity intact",
+    "Test leader loss, database crash, ingress restart, and node drain; record RTO/RPO",
   ]}
 />
 
diff --git a/src/content/docs/ingress-tls-access.mdx b/src/content/docs/ingress-tls-access.mdx
index 9e8eb3a..a53c77c 100644
--- a/src/content/docs/ingress-tls-access.mdx
+++ b/src/content/docs/ingress-tls-access.mdx
@@ -211,8 +211,8 @@ The `$SESSION_TOKEN` comes from a prior dashboard login, not a Kubernetes token.
 <DocsQuickReference
   label="EDGE CHECK"
   items={[
-    "01  DNS → trusted HTTPS edge → Gameplane Service",
-    "02  Verify certificate, OIDC callback, console WS, upload, and API",
-    "03  Record host, Ingress class, issuer, proxy CIDRs, firewall, owner",
+    "DNS → trusted HTTPS edge → Gameplane Service",
+    "Verify certificate, OIDC callback, console WS, upload, and API",
+    "Record host, Ingress class, issuer, proxy CIDRs, firewall, owner",
   ]}
 />
diff --git a/src/content/docs/lifecycle-probes.mdx b/src/content/docs/lifecycle-probes.mdx
index ba30d9a..95b6967 100644
--- a/src/content/docs/lifecycle-probes.mdx
+++ b/src/content/docs/lifecycle-probes.mdx
@@ -98,9 +98,9 @@ Override timing one probe family at a time; startup protects boot, readiness gat
 <DocsQuickReference
   label="PROBE MODEL"
   items={[
-    "01  Auto-restart off → zero replicas, Suspended, data preserved",
-    "02  Grace period 0–600s; requires template stop sequence",
-    "03  Startup protects boot; readiness gates traffic; liveness recovers",
+    "Auto-restart off → zero replicas, Suspended, data preserved",
+    "Grace period 0–600s; requires template stop sequence",
+    "Startup protects boot; readiness gates traffic; liveness recovers",
   ]}
 />
 
diff --git a/src/content/docs/local-development-setup.mdx b/src/content/docs/local-development-setup.mdx
index c3f31ea..78f2c42 100644
--- a/src/content/docs/local-development-setup.mdx
+++ b/src/content/docs/local-development-setup.mdx
@@ -74,8 +74,8 @@ Keep host and cluster registry addresses, kube context, namespaces, image tags,
 <DocsQuickReference
   label="LOCAL LOOP"
   items={[
-    "01  git submodule update --init --recursive",
-    "02  make dev-up && make web-dev",
-    "03  make dev-down   # or CLUSTER=remote make dev-up",
+    "git submodule update --init --recursive",
+    "make dev-up && make web-dev",
+    "make dev-down   # or CLUSTER=remote make dev-up",
   ]}
 />
diff --git a/src/content/docs/mod-registry-credentials.mdx b/src/content/docs/mod-registry-credentials.mdx
index f832b53..b05e56f 100644
--- a/src/content/docs/mod-registry-credentials.mdx
+++ b/src/content/docs/mod-registry-credentials.mdx
@@ -90,9 +90,9 @@ Run a compatible harmless search, diagnose without exposing the key, then rotate
 <DocsQuickReference
   label="REGISTRY CHECK"
   items={[
-    "01  Provider credential + compatible game/loader/module capability",
-    "02  Set/Replace stores Secret; Remove hides or disables provider",
-    "03  Test search → rotate → retest metadata/install → revoke old key",
+    "Provider credential + compatible game/loader/module capability",
+    "Set/Replace stores Secret; Remove hides or disables provider",
+    "Test search → rotate → retest metadata/install → revoke old key",
   ]}
 />
 
diff --git a/src/content/docs/mods-modpacks.mdx b/src/content/docs/mods-modpacks.mdx
index 6e56594..8cea41e 100644
--- a/src/content/docs/mods-modpacks.mdx
+++ b/src/content/docs/mods-modpacks.mdx
@@ -74,8 +74,8 @@ Back up first, confirm the manifest, allow the required restart, and validate ev
 <DocsQuickReference
   label="MOD CHANGE"
   items={[
-    "01  Match game + loader + version; choose a trusted source",
-    "02  URL may update; upload never auto-updates; IDs persist in manifest",
-    "03  Backup → save manifest → restart → validate logs and joins",
+    "Match game + loader + version; choose a trusted source",
+    "URL may update; upload never auto-updates; IDs persist in manifest",
+    "Backup → save manifest → restart → validate logs and joins",
   ]}
 />
diff --git a/src/content/docs/modules-sources.mdx b/src/content/docs/modules-sources.mdx
index b5f8772..c8093a8 100644
--- a/src/content/docs/modules-sources.mdx
+++ b/src/content/docs/modules-sources.mdx
@@ -93,9 +93,9 @@ Package metadata, templates, assets, and compatibility as versioned OCI content
 <DocsQuickReference
   label="MODULE RELEASE LOOP"
   items={[
-    "01  Validate schema, templates, capabilities, and supported versions",
-    "02  Build, sign, push, then verify the exact OCI digest",
-    "03  Sync the source, install, deploy a canary, and test rollback",
+    "Validate schema, templates, capabilities, and supported versions",
+    "Build, sign, push, then verify the exact OCI digest",
+    "Sync the source, install, deploy a canary, and test rollback",
   ]}
 />
 
diff --git a/src/content/docs/multi-cluster.mdx b/src/content/docs/multi-cluster.mdx
index fce36c5..4c4c345 100644
--- a/src/content/docs/multi-cluster.mdx
+++ b/src/content/docs/multi-cluster.mdx
@@ -132,9 +132,9 @@ Promote `Cluster` CRs, `GameTemplate`, and `Module` manifests through version co
 <DocsQuickReference
   label="BOUNDARY MODEL"
   items={[
-    "01  Control plane + DB + target cluster = operational boundary",
-    "02  Share GitOps/SSO policy, not live state or credentials",
-    "03  Move → export config + backup + restore + endpoint/owner validation",
+    "Control plane + DB + target cluster = operational boundary",
+    "Share GitOps/SSO policy, not live state or credentials",
+    "Move → export config + backup + restore + endpoint/owner validation",
   ]}
 />
 
diff --git a/src/content/docs/network-automation.mdx b/src/content/docs/network-automation.mdx
index f055a0e..dab24a1 100644
--- a/src/content/docs/network-automation.mdx
+++ b/src/content/docs/network-automation.mdx
@@ -107,9 +107,9 @@ A **BackupSchedule** CRD runs backups on a recurring cron schedule. Each schedul
 <DocsQuickReference
   label="AUTOMATION CHECK"
   items={[
-    "01  Validate cron timezone, target server, destination, and retention",
-    "02  Announce maintenance and save before a planned restart",
-    "03  Confirm the job, resulting backup, and audit entry completed",
+    "Validate cron timezone, target server, destination, and retention",
+    "Announce maintenance and save before a planned restart",
+    "Confirm the job, resulting backup, and audit entry completed",
   ]}
 />
 
diff --git a/src/content/docs/operator-crd-development.mdx b/src/content/docs/operator-crd-development.mdx
index abcb14d..6e9ff05 100644
--- a/src/content/docs/operator-crd-development.mdx
+++ b/src/content/docs/operator-crd-development.mdx
@@ -83,9 +83,9 @@ Use unit tests for helpers, envtest for API/controller behavior, and Kind E2E fo
 <DocsQuickReference
   label="CRD LOOP"
   items={[
-    "01  make generate   # Deepcopy code and schemas",
-    "02  make manifests  # CRDs, RBAC, and chart copies",
-    "03  make test-integration   # Kubernetes envtest",
+    "make generate   # Deepcopy code and schemas",
+    "make manifests  # CRDs, RBAC, and chart copies",
+    "make test-integration   # Kubernetes envtest",
   ]}
 />
 
diff --git a/src/content/docs/ownership-danger-zone.mdx b/src/content/docs/ownership-danger-zone.mdx
index 331f3a3..b22b0ac 100644
--- a/src/content/docs/ownership-danger-zone.mdx
+++ b/src/content/docs/ownership-danger-zone.mdx
@@ -68,9 +68,9 @@ Both operations require a verified backup and an explicit owner decision:
 <DocsQuickReference
   label="DESTRUCTIVE ACTION"
   items={[
-    "01  Collaborator = operate; owner = transfer and destructive authority",
-    "02  Transfer changes accountability and must be audited",
-    "03  Backup + stop writes; Wipe keeps config, Delete removes server+volume",
+    "Collaborator = operate; owner = transfer and destructive authority",
+    "Transfer changes accountability and must be audited",
+    "Backup + stop writes; Wipe keeps config, Delete removes server+volume",
   ]}
 />
 
diff --git a/src/content/docs/public-website-development.mdx b/src/content/docs/public-website-development.mdx
index 6b0a52f..d1efd86 100644
--- a/src/content/docs/public-website-development.mdx
+++ b/src/content/docs/public-website-development.mdx
@@ -74,8 +74,8 @@ Update Pencil first for visual changes, edit MDX and navigation together, merge
 <DocsQuickReference
   label="WEBSITE LOOP"
   items={[
-    "01  cd website && npm ci && npm run dev",
-    "02  npm run build   # validate static routes and content",
-    "03  Merge website PR → bump submodule pointer → verify public links",
+    "cd website && npm ci && npm run dev",
+    "npm run build   # validate static routes and content",
+    "Merge website PR → bump submodule pointer → verify public links",
   ]}
 />
diff --git a/src/content/docs/remote-agent-gateway.mdx b/src/content/docs/remote-agent-gateway.mdx
index 27fb500..d3ffd49 100644
--- a/src/content/docs/remote-agent-gateway.mdx
+++ b/src/content/docs/remote-agent-gateway.mdx
@@ -298,10 +298,10 @@ Record-only deletion does not free retained file storage.
 <DocsQuickReference
   label="GATEWAY"
   items={[
-    "01  Secrets first: server TLS, central client CA, agent client + CA",
-    "02  Helm: api.enabled=false, gateway.enabled=true, clusterID, peerURI, NetworkPolicy CIDRs",
-    "03  Central: labeled credential Secret + Cluster spec.agentGateway",
-    "04  Verify a test server end to end; Cluster health is Kubernetes-only",
+    "Secrets first: server TLS, central client CA, agent client + CA",
+    "Helm: api.enabled=false, gateway.enabled=true, clusterID, peerURI, NetworkPolicy CIDRs",
+    "Central: labeled credential Secret + Cluster spec.agentGateway",
+    "Verify a test server end to end; Cluster health is Kubernetes-only",
   ]}
 />
 
diff --git a/src/content/docs/server-configuration.mdx b/src/content/docs/server-configuration.mdx
index e43e8e8..3a3a812 100644
--- a/src/content/docs/server-configuration.mdx
+++ b/src/content/docs/server-configuration.mdx
@@ -211,9 +211,9 @@ Before a user or operator deletes a server, ensure a recent backup exists. Enabl
 <DocsQuickReference
   label="SAFE CONFIG CHANGE"
   items={[
-    "01  Capture current YAML and create a verified backup",
-    "02  Apply one concern at a time and watch conditions and events",
-    "03  Validate players, ports, storage, and ownership after reconciliation",
+    "Capture current YAML and create a verified backup",
+    "Apply one concern at a time and watch conditions and events",
+    "Validate players, ports, storage, and ownership after reconciliation",
   ]}
 />
 
diff --git a/src/content/docs/server-operations.mdx b/src/content/docs/server-operations.mdx
index 62d100d..1ff4acc 100644
--- a/src/content/docs/server-operations.mdx
+++ b/src/content/docs/server-operations.mdx
@@ -126,9 +126,9 @@ Treat transfers and destructive actions as audited workflows with a recovery pat
 <DocsQuickReference
   label="SAFE CHANGE CHECK"
   items={[
-    "01  Check owner, collaborators, and current conditions",
-    "02  Create or verify a recent backup before world changes",
-    "03  Run the action and confirm events, status, and audit entry",
+    "Check owner, collaborators, and current conditions",
+    "Create or verify a recent backup before world changes",
+    "Run the action and confirm events, status, and audit entry",
   ]}
 />
 
diff --git a/src/content/docs/server-overview.mdx b/src/content/docs/server-overview.mdx
index 519e27c..29a50a2 100644
--- a/src/content/docs/server-overview.mdx
+++ b/src/content/docs/server-overview.mdx
@@ -80,8 +80,8 @@ The quick-actions bar offers one-click access to common operations:
 <DocsQuickReference
   label="OPERATING LOOP"
   items={[
-    "01  Identify → cluster, namespace, version, state, and uptime",
-    "02  Validate → resources, endpoint, events, players, world state",
-    "03  Save and broadcast → one action → confirm status and audit",
+    "Identify → cluster, namespace, version, state, and uptime",
+    "Validate → resources, endpoint, events, players, world state",
+    "Save and broadcast → one action → confirm status and audit",
   ]}
 />
diff --git a/src/content/docs/sign-in-recovery.mdx b/src/content/docs/sign-in-recovery.mdx
index ee0f34d..5f6e4fc 100644
--- a/src/content/docs/sign-in-recovery.mdx
+++ b/src/content/docs/sign-in-recovery.mdx
@@ -123,8 +123,8 @@ The `bootstrap-admin` command must be run on any API pod that can reach the data
 <DocsQuickReference
   label="RECOVERY PATH"
   items={[
-    "01  Local → username/email + password; OIDC → provider button",
-    "02  Failure → API health, redirect, issuer, claims, and rate limits",
-    "03  Recovery → audited admin reset or bootstrap-admin break-glass; OIDC resets upstream",
+    "Local → username/email + password; OIDC → provider button",
+    "Failure → API health, redirect, issuer, claims, and rate limits",
+    "Recovery → audited admin reset or bootstrap-admin break-glass; OIDC resets upstream",
   ]}
 />
diff --git a/src/content/docs/system-log-viewer.mdx b/src/content/docs/system-log-viewer.mdx
index 4a6b4bb..2e8cf7f 100644
--- a/src/content/docs/system-log-viewer.mdx
+++ b/src/content/docs/system-log-viewer.mdx
@@ -74,8 +74,8 @@ Join API request/audit evidence to operator reconciliation, conditions, events,
 <DocsQuickReference
   label="LOG CORRELATION"
   items={[
-    "01  API = sessions/requests/streams; Operator = reconciliation/K8s",
-    "02  Tail enough history, Follow live, Download before restart",
-    "03  Correlate time + actor + UID across audit, events, operator, game",
+    "API = sessions/requests/streams; Operator = reconciliation/K8s",
+    "Tail enough history, Follow live, Download before restart",
+    "Correlate time + actor + UID across audit, events, operator, game",
   ]}
 />
diff --git a/src/content/docs/template-configuration.mdx b/src/content/docs/template-configuration.mdx
index b23ecb9..489326f 100644
--- a/src/content/docs/template-configuration.mdx
+++ b/src/content/docs/template-configuration.mdx
@@ -93,9 +93,9 @@ Never pass secrets via plain ConfigFields of type `string`. Always use the `pass
 <DocsQuickReference
   label="CONFIG CHECK"
   items={[
-    "01  Confirm infrastructure name, description, MOTD, and player limit",
-    "02  Confirm game rules, whitelist, identity mode, and world seed",
-    "03  Prefer auto heap; if pinned, leave ~25% headroom and review YAML",
+    "Confirm infrastructure name, description, MOTD, and player limit",
+    "Confirm game rules, whitelist, identity mode, and world seed",
+    "Prefer auto heap; if pinned, leave ~25% headroom and review YAML",
   ]}
 />
 
diff --git a/src/content/docs/test-publish-sign-modules.mdx b/src/content/docs/test-publish-sign-modules.mdx
index 9335885..69fd044 100644
--- a/src/content/docs/test-publish-sign-modules.mdx
+++ b/src/content/docs/test-publish-sign-modules.mdx
@@ -68,9 +68,9 @@ To get started, generate a key pair using `cosign generate-key-pair`, store the
 <DocsQuickReference
   label="MODULE RELEASE"
   items={[
-    "01  make dev-up && make modules-push",
-    "02  cosign sign --key env://COSIGN_PRIVATE_KEY --tlog-upload=false <digest>",
-    "03  cosign verify --key cosign.pub --insecure-ignore-tlog=true <digest>",
+    "make dev-up && make modules-push",
+    "cosign sign --key env://COSIGN_PRIVATE_KEY --tlog-upload=false <digest>",
+    "cosign verify --key cosign.pub --insecure-ignore-tlog=true <digest>",
   ]}
 />
 
diff --git a/src/content/docs/troubleshooting.mdx b/src/content/docs/troubleshooting.mdx
index 8fd1142..40211f4 100644
--- a/src/content/docs/troubleshooting.mdx
+++ b/src/content/docs/troubleshooting.mdx
@@ -49,9 +49,9 @@ When local checks are exhausted, share a minimal reproducible case without secre
 <DocsQuickReference
   label="TRIAGE ORDER"
   items={[
-    "01  Spec → status/conditions → events → workload and PVC/service state",
-    "02  API/operator logs → container logs → game logs → audit history",
-    "03  Recent change → safe rollback → sanitized support bundle",
+    "Spec → status/conditions → events → workload and PVC/service state",
+    "API/operator logs → container logs → game logs → audit history",
+    "Recent change → safe rollback → sanitized support bundle",
   ]}
 />
 
diff --git a/src/content/docs/uninstall-decommission.mdx b/src/content/docs/uninstall-decommission.mdx
index aec6d15..a58fa55 100644
--- a/src/content/docs/uninstall-decommission.mdx
+++ b/src/content/docs/uninstall-decommission.mdx
@@ -203,9 +203,9 @@ Check for orphaned resources and costs, revoke credentials, and archive restorat
 <DocsQuickReference
   label="DECOMMISSION CHECKLIST"
   items={[
-    "01  Freeze automation → verify export/backup → approve inventory",
-    "02  Uninstall controllers before resolving residual finalizers/resources",
-    "03  Verify no PVC/LB/DNS/Secret/repository remains; archive evidence",
+    "Freeze automation → verify export/backup → approve inventory",
+    "Uninstall controllers before resolving residual finalizers/resources",
+    "Verify no PVC/LB/DNS/Secret/repository remains; archive evidence",
   ]}
 />
 
diff --git a/src/content/docs/upgrades-migrations.mdx b/src/content/docs/upgrades-migrations.mdx
index cc6fd9f..fccd4ca 100644
--- a/src/content/docs/upgrades-migrations.mdx
+++ b/src/content/docs/upgrades-migrations.mdx
@@ -191,9 +191,9 @@ kubectl rollout status deploy/gameplane-api -n gameplane-system
 <DocsQuickReference
   label="UPGRADE GATE"
   items={[
-    "01  Backups verified; values exported; release notes and diff reviewed",
-    "02  Canary healthy; migrations complete; core workflows tested",
-    "03  Production observed; version recorded; rollback window closed",
+    "Backups verified; values exported; release notes and diff reviewed",
+    "Canary healthy; migrations complete; core workflows tested",
+    "Production observed; version recorded; rollback window closed",
   ]}
 />
 
diff --git a/src/content/docs/upload-a-module.mdx b/src/content/docs/upload-a-module.mdx
index 9e6893f..2c144a4 100644
--- a/src/content/docs/upload-a-module.mdx
+++ b/src/content/docs/upload-a-module.mdx
@@ -112,9 +112,9 @@ Never mutate a released module archive. Instead, version-bump and canary in para
 <DocsQuickReference
   label="UPLOAD FLOW"
   items={[
-    "01  Upload ModuleSource + validated .tar.gz bundle",
-    "02  Verify name, version, source, digest, policy, capabilities after sync",
-    "03  Install exact version → canary all capabilities → keep rollback release",
+    "Upload ModuleSource + validated .tar.gz bundle",
+    "Verify name, version, source, digest, policy, capabilities after sync",
+    "Install exact version → canary all capabilities → keep rollback release",
   ]}
 />
 
diff --git a/src/content/docs/user-administration.mdx b/src/content/docs/user-administration.mdx
index b0fe2b6..0b1c365 100644
--- a/src/content/docs/user-administration.mdx
+++ b/src/content/docs/user-administration.mdx
@@ -82,9 +82,9 @@ Periodically review:
 <DocsQuickReference
   label="USER LIFECYCLE"
   items={[
-    "01  Invite → unique identity + 12-char password + least privilege",
-    "02  Local reset in Gameplane; OIDC credentials remain upstream",
-    "03  Audit role/collaboration changes; service accounts depend on release",
+    "Invite → unique identity + 12-char password + least privilege",
+    "Local reset in Gameplane; OIDC credentials remain upstream",
+    "Audit role/collaboration changes; service accounts depend on release",
   ]}
 />
 
diff --git a/src/content/docs/users-auth-rbac.mdx b/src/content/docs/users-auth-rbac.mdx
index 999646b..e1e0d8c 100644
--- a/src/content/docs/users-auth-rbac.mdx
+++ b/src/content/docs/users-auth-rbac.mdx
@@ -125,9 +125,9 @@ After deployment, admins can override role mappings through the dashboard withou
 <DocsQuickReference
   label="LOCKOUT PREVENTION"
   items={[
-    "01  Keep a local admin session open while testing the identity provider",
-    "02  Verify redirect URI, issuer, claims, groups, and mapped permissions",
-    "03  Test login and logout in a private session before enforcing SSO-only",
+    "Keep a local admin session open while testing the identity provider",
+    "Verify redirect URI, issuer, claims, groups, and mapped permissions",
+    "Test login and logout in a private session before enforcing SSO-only",
   ]}
 />
 
diff --git a/src/content/docs/web-dashboard-development.mdx b/src/content/docs/web-dashboard-development.mdx
index 47a46f2..19729a9 100644
--- a/src/content/docs/web-dashboard-development.mdx
+++ b/src/content/docs/web-dashboard-development.mdx
@@ -73,9 +73,9 @@ Use strict build, lint, Vitest/MSW, and the appropriate Playwright mode; UI chan
 <DocsQuickReference
   label="WEB CHECK"
   items={[
-    "01  cd web && npm ci && npm run dev",
-    "02  npm test && npm run lint && npm run build",
-    "03  npm run test:e2e:mock   # live: make test-web-e2e-live",
+    "cd web && npm ci && npm run dev",
+    "npm test && npm run lint && npm run build",
+    "npm run test:e2e:mock   # live: make test-web-e2e-live",
   ]}
 />