Docs: stage access is direct HTTPS (*.calentiq.com); :8787 proxy is DNS fallback only. [skip ci]

scripts/stage-browser-alias-proxy.mjs

@@ -1,10 +1,16 @@
 #!/usr/bin/env node
 /**
- * Cursor-browser alias for stage UI.
+ * Optional DNS fallback for Cursor browser → internal stage UI.
  *
- * Why: Chromium treats *.local as mDNS and often ignores unicast DNS / hosts.
- * This proxy serves http://ui.stage.eventhub.test:8787 → https://stage
- * with Host/SNI ui.stage.eventhub.local (Traefik + existing cert).
+ * Canonical access is direct HTTPS (valid public DNS + TLS):
+ *   https://stage.calentiq.com/  (client)
+ *   https://admin.stage.calentiq.com/
+ *
+ * Use this proxy ONLY when Cursor/Chromium cannot resolve the stage hostname
+ * (e.g. *.local mDNS quirks) — not because of certificates.
+ *
+ * Serves http://ui.stage.eventhub.test:8787 → https://ui.stage.eventhub.local
+ * with Host/SNI rewrite for Traefik.
  *
  * Usage:
  *   node stage-browser-alias-proxy.mjs