docs: make the demo verification command actually pass

[rubenvdlinde]

A follow-up to the demo-environment page, fixing two things measured against a booted demo rather than inferred.

The verification command could not pass

The page told you to run

curl -s -o /dev/null -w '%{http_code}' "http://localhost:PORT/apps/APP/"

and described the result as confirmation the app answered. That request is unauthenticated, and a Nextcloud app page requires a login — so on a completely healthy demo it prints 401. Someone following the page would conclude their demo was broken.

Measured on two booted demos: unauthenticated 401, the same URL with -u admin:admin 200. The command now carries the demo credentials, and says in words that a bare 401 is expected rather than a fault.

This is the shape the page itself warns about, one level up: a check whose output you have already decided the meaning of isn't a check.

Thematiq has no app page

/apps/thematiq/ answers 404 even authenticated — Thematiq declares <admin-section>theming</admin-section> and ships no app route. Every page linked there sent the reader to a dead URL. It now opens Settings → Administration → Theming, which answers 200.

Verification

Both corrected commands were run against two independently booted demos (portaliq on 8613, shillinq on 8611) and return 200.

[github-actions]

Quality Report — ConductionNL/buildiq @ 20bdca1

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
test-l10n		✅
check-gitignore		✅
check-nc-floor		✅
format		✅
check-l10n-js		✅
check-schema-l10n		✅
composer			✅	✅ 106/106
npm			✅	✅ 642/642
app:check-code	⏭️
info.xml	✅
REUSE	❌
PHPUnit					✅
Newman					✅
Playwright					🚨 NO VERDICT — enabled but never ran
Hydra gates					✅

---

Quality workflow — 2026-08-28 14:15 UTC

Download the full PDF report from the workflow artifacts.