Keryx secret-free templates

Copy-paste files for deployer and store evidence. Placeholders only — do not paste passwords, tk_… tokens, keystores, or filled client records into git.

Packet: Client ntfy and push deployer checklist; Reviewer environment. Human rows: Operator actions.

Deployer

File	Use
ntfy-server.dual-run.yml	Current interim (read-write)
ntfy-server.deny-all.yml	Later cutover only. Do not apply on hetest2 now
nginx-ntfy.conf	TLS terminate + forwarded client IP
safecall-ntfy-config.md	SafeCall util.sh config set

Store and evidence

File	Use
release-record.md	Copy to NAS evidence/keryx/ when cutting a store candidate
store-org-evidence-pack.md	Walk sheet for org roles and EU trader
reviewer-page.md	Public {public_base}/keryx/review copy (OA-123-review-host); no tokens