feat(website): add the project site and deploy it to GitHub Pages

A Vite + React + TypeScript + Tailwind v4 site under website/, built from
the soulseek-rs design system so the site and the TUI stay one product.
The colour tokens in src/index.css are the same values as
soulseek-rs/src/ui/styles.rs; change one, change both.

The hero is a working recreation of the TUI: it plays one scripted run and
then takes the keyboard, or lands on the resting state directly under
prefers-reduced-motion. Its sample data is invented or public domain, per
the tone-of-voice guardrail against naming copyrighted material.

Static output rather than an SPA shell. `bun run build` compiles the client,
compiles the same app for Node, then renders every route in src/lib/routes.ts
to its own file with that route's title, description and canonical URL. A
direct link to /install therefore answers 200 with real markup instead of
GitHub's 404 page. routes.ts is keyed into App.tsx by literal path, so adding
one without the other fails typecheck rather than shipping a page whose body
says "not found" under the right title.

Theme is resolved once by an inline script before first paint and adopted by
React through useSyncExternalStore, so there is no flash and no hydration
mismatch on the toggle. Light mode re-cuts the semantic hues darker: phosphor
and tape read on vinyl but wash out on manila.

CI and release skip website-only pushes, and Pages skips Rust-only ones. The
two Rust workflows share one paths-ignore list so they can only skip
together, which keeps the release ci-gate from polling for a run that was
never queued. That gate also now treats a cancelled CI as "keep waiting"
rather than a failure, since cancel-in-progress cancels the older SHA on
every back-to-back push.

.github/workflows/release.yml

@@ -2,7 +2,10 @@ name: Release
 
 on:
   push:
+    # Must match ci.yml's paths-ignore exactly. A website-only push skips both
+    # workflows, so ci-gate is never left polling for an absent CI run.
     branches: [master]
+    paths-ignore: ['website/**']
   workflow_dispatch:
     inputs:
       tag:
@@ -48,7 +51,11 @@ jobs:
               2>/dev/null || echo "unreachable")
             case "$verdict" in
               success)          echo "CI passed for $GITHUB_SHA"; exit 0 ;;
-              absent|running|unreachable) ;;
+              # `cancelled` is what CI's own cancel-in-progress does to the
+              # older SHA when two pushes land back to back. Treating it as a
+              # failure turned every rapid push into a red release; keep
+              # waiting instead, and let the newer SHA's run decide.
+              absent|running|unreachable|cancelled) ;;
               *) echo "::error::CI concluded '$verdict' for $GITHUB_SHA - refusing to release"; exit 1 ;;
             esac
             sleep 20