fixup! docs: goal tree aims at the weekly roundup (#23)

5-ii: rate-limiting is chiefly about /api now that public pages only read.

Generated-by: Claude Opus 5.5

capsite-checklist.md

@@ -93,7 +93,7 @@ narrative.
         is one cheap form of discretion).
   - [ ] **5. Deployed end-to-end** (order matters):
         - [ ] 5-i. webapp: `cd webapp && npx wrangler deploy`
-        - [ ] 5-ii. diigo-cache: rate-limit `/public/*` and `/api` first
+        - [ ] 5-ii. diigo-cache: rate-limit `/api` (and `/public/*`) first
               (diigo-cache README, "Deployment concern"); deploy; create
               against prod (ids → password manager; no worker secret);
               run the fill job.