A real front page at oficina.works open review pending
On branch front-page
The apex served a placeholder saying the suite was not built yet, while six apps ran live behind it. This replaces it with the real front page: the app directory and where each app runs, Memoria, team isolation, and the native apps' status.
One embedded HTML file, one stylesheet, four font subsets, all same-origin — default-src 'self' already admitted them, so SecurityPolicy is unchanged. Site assets are public on both origins like the brand marks, and origins_test.go's two copies of that path list are now one.
No sign-up form: provisioning is still the oficina provision operator CLI, so the page says so instead of posting into a 404.