REST write API + public smoke CI

POST write endpoints mirror MCP for posts, comments, changelog, and docs. Hourly public-smoke workflow fails deploys that leak private IPs or internal ports in public redirects and HTML, same pattern as OMA.