Update Connect portable app documentation

[callumalpass]

What changed

• pin the site and CI source sync to current mdbase-connect main
• publish the current v1 manifest and Connect protocol schemas
• add a complete portable HTML application guide covering short-code authorization, file:// isolation, the browser bundle, and Subresource Integrity
• update manifest, authorization, routing, security, testing, API, and release-status documentation
• document hosted-to-local authority transfer
• remove the obsolete Connect-owned TaskNotes adapter documentation

Why

The site was pinned to Connect commit fec3e22, before portable applications and subsequent architecture changes. Its live manifest schema rejected portable declarations, /sdk/portable-apps/ did not exist, and npm commands did not identify that first publication is still pending.

Impact

Developers can now follow the deployed v1 portable-app flow and distinguish current production behavior from package publication status. Existing web manifests remain documented as v1-compatible.

Validation

• pnpm sync:sources
• pnpm test
• git diff --check
• all documented manifest examples validated with AJV against the current v1 schema
• schema files byte-compared with the pinned Connect source
• desktop and 390px mobile rendered-page smoke checks, with no console errors or document overflow
• browser bundle SRI value compared with the current @mdbase/connect build