Docs: instance ownership + lint against this instance's binary

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

README.md

@@ -31,10 +31,18 @@ this repo only notes what's distinctive here:
   `redoal_subscribers`): both portal instances share one NATS
   JetStream, and bare names would collide with uhhm's buckets.
 
+This repo also runs the redoal.com instance itself:
+`.gitea/workflows/deploy.yml` pins `PORTAL_RELEASE` to a release tag
+on uhhm/portal — bump the pin and push to upgrade (or revert to roll
+back), and the workflow ships the artifact, rewrites the env from
+this repo's Actions variables/secrets, restarts `app@redoal-portal`,
+and refreshes the Caddy route. Content edits never need a deploy;
+they hot-reload live.
+
 Lint locally before pushing:
 
 ```
-/srv/app/uhhm-portal/current/question_lint --path questions
+/srv/app/redoal-portal/current/question_lint --path questions
 ```
 
 (or from a portal checkout: