feat: finalize public baseline resume and publish GitHub Pages #23

Goal

Finish the application-ready résumé repository as a durable public career surface, then make the canonical public baseline available at a stable GitHub Pages URL.

Scope

Baseline content modernization

• keep content/career.json as the single source of truth;
• preserve verified MIT Lincoln Laboratory chronology, bounded funding language, education, privacy rules, and DOI-backed Reflector artifact;
• modernize current independent/open-source evidence with concrete public systems rather than generic technology claims;
• update evidenced skills to reflect current platform/DevEx, Rust/CLI, reproducibility, local-first, and AI-assisted workflow work without keyword stuffing;
• keep the general résumé as the canonical Platform/DevEx baseline and preserve role-specific derivatives.

Public GitHub Pages surface

Publish https://szmyty.github.io/resume/ from the existing validated build pipeline.

The Pages artifact should contain:

• a polished responsive landing page;
• the sanitized canonical public résumé as resume.pdf;
• direct links to the résumé PDF, portfolio, GitHub, ORCID, and source repository;
• no application-only contact overlay or private data.

Extend the existing build workflow rather than adding a parallel document-build system. Pages deployment should occur only from main after the full validation/build job succeeds.

Current-system evidence to foreground

Use public repository evidence only and avoid adoption/impact claims:

• Renderflow — Rust, specification-driven document rendering, graph-planned transforms, caching, multi-format output;
• Relay — reusable/versioned GitHub Actions and CI contracts;
• Optiflow — local-first read-only Rust CLI, SQLite analysis, BLAKE3 duplicate evidence, schema-versioned artifacts;
• Reflector remains the DOI-backed research artifact already modeled separately.

Acceptance criteria

• Canonical ledger reviewed/updated with current public systems evidence.
• General baseline remains coherent and evidence-first.
• Rust and current CLI/platform capabilities are represented only where publicly evidenced.
• All public/application résumé variants and public research CV still validate.
• Canonical public résumé remains exactly two balanced pages.
• Public artifact contains no email, phone, private overlay, or unsafe PDF metadata/actions.
• GitHub Pages publishes the validated canonical public résumé at /resume.pdf.
• Responsive landing page works without JavaScript or external build dependencies.
• Existing CI remains the single validation/build pipeline.
• README documents the permanent public URL and publication contract.

This issue is the final baseline/publication pass after #22.