Public web frontend

Sites are served at /sites/[siteId]/[...slug].

Cached at the edge with surrogate-key invalidation.