Search indexing contract

Adds Google Search Console verification, canonical URLs, robots.txt, and sitemap.xml for the public product site. Private application routes remain excluded from crawling.