chore: add missing source modules to version control

apix-demo, apix-portal/src, apix-spider/src, apix-registry/src,
apix-common/src were never staged. Without them the CI build has no
source to compile and the Docker images cannot be produced.

Also adds docs/ (infrastructure notes) missed in prior commits.

Co-Authored-By: Mira <noreply@anthropic.com>

apix-registry/src/main/resources/application.properties

@@ -19,6 +19,12 @@ quarkus.liquibase.change-log=db/changelog/db.changelog-master.xml
 # ── HTTP ──────────────────────────────────────────────────────────────────────
 quarkus.http.port=8180
 
+# ── Registry identity — used by IndexResource for HATEOAS links ───────────────
+apix.registry.base-url=${APIX_REGISTRY_BASE_URL:http://localhost:8180}
+apix.registry.name=${APIX_REGISTRY_NAME:APIX Registry}
+apix.portal.base-url=${APIX_PORTAL_BASE_URL:https://www.api-index.org}
+apix.registry.description=${APIX_REGISTRY_DESCRIPTION:The open autonomous agent service discovery registry. Follow _links.services to browse, or _links.servicesSearch to filter by capability.}
+
 # ── Security — API key for write endpoints ───────────────────────────────────
 apix.api-key=${APIX_API_KEY:dev-insecure-key-change-in-prod}
 
@@ -41,6 +47,22 @@ apix.mail.signing.public-key-base64=${APIX_MAIL_SIGNING_PUBLIC_KEY:}
 apix.mail.signing.kid=${APIX_MAIL_SIGNING_KID:dev}
 apix.sanctions.cache-path=${SANCTIONS_CACHE_PATH:./sanctions-cache}
 
+# ── Cache ─────────────────────────────────────────────────────────────────────
+# registry-index: caches GET / response. 60s TTL is acceptable — agents read the
+# root for navigation links which are static; counts are informational only.
+# CDN layer sits in front for edge caching. CDN choice is a governance decision:
+# no founding member candidate may operate infrastructure over the registry.
+# - Bunny.net (primary): European (Slovenia), 100+ PoPs, Africa + Asia-Pacific
+#   coverage, privacy values align with Swiss Stiftung model. No AI/agent play.
+# - Fastly (secondary/fallback): independent US public company, no AI/agent play,
+#   built for API/JSON caching, used by GitHub and npm, strong developer trust.
+# - DO NOT use Cloudflare (founding member target) or AWS CloudFront (AWS is a
+#   founding member target): operational infrastructure = governance leverage,
+#   regardless of what the founding charter says.
+quarkus.cache.caffeine.registry-index.expire-after-write=60S
+quarkus.cache.caffeine.registry-index.initial-capacity=1
+quarkus.cache.caffeine.registry-index.maximum-size=1
+
 # ── Logging ───────────────────────────────────────────────────────────────────
 quarkus.log.level=${LOG_LEVEL:DEBUG}
 quarkus.log.console.json=false