docs: record CORS trust and explicit version delete authorization

[Vonng]

Summary

Publish the operator-facing documentation for the server candidates in:

• pgsty/silo#101: resident-only pre-auth CORS and unified replication request trust;
• pgsty/silo#104: explicit-version deletes use s3:DeleteObjectVersion while trusted replication retains the documented target policy.

Changes include:

• a bilingual design record for CORS and replication trust, including evidence and unreleased status boundaries;
• an EN/ZH release note for issue #58 and PR #104;
• corrected Object Deletion permission matrices for no version ID, UUID, and versionId=null;
• DeleteObjects per-entry s3:versionid condition behavior;
• IAM policy-action clarifications;
• bucket-replication target policy compatibility notes;
• trust-design clarification that ReplicateDelete is the trust gate while the receiver also preserves DeleteObject and explicit version-deny checks.

Compatibility and release boundary

The release note explicitly states that publication does not imply a merged server change, release artifact, image, package, deployment, or production verification. Ordinary DeleteObject-only principals lose named-version deletion only when a release containing #104 is deployed. Replication target policies do not add DeleteObjectVersion.

Verification

• go mod verify PASS;
• strict Hugo build with --panicOnWarning PASS;
• EN/ZH each render 1,185 pages;
• 476,433 internal references across 1,381 HTML files PASS;
• new EN/ZH release routes exist with reciprocal canonical/hreflang links;
• no trailing whitespace or diff-check errors.

The original site worktree's manual data/home/metrics.yaml change and untracked Console 2.3.0 drafts were isolated in another worktree and are not part of this PR.

[cloudflare-workers-and-pages]

Deploying silo-pgsty-com with    Cloudflare Pages

Latest commit:	0a54b96
Status:	✅  Deploy successful!
Preview URL:	https://487efd39.silo-pgsty-com.pages.dev
Branch Preview URL:	https://codex-delete-version-authz-d.silo-pgsty-com.pages.dev

View logs