docs: make public configuration examples portable

[Pigbibi]

Summary

• replace the deployment-specific execution-report bucket in .env.example with an explicit public placeholder
• replace the machine-specific repository path in the rollout guide with a portable placeholder
• add focused regression coverage for URI shape and repository-path portability

Scope

Documentation and public example configuration only. No workflow, OIDC, verifier, runtime, permission, dependency, deployment, or live-operation changes.

Validation

• uv run --no-sync pytest -q tests/test_public_config_examples.py — 2 passed
• uv run --no-sync ruff check --exclude external . — passed
• uv run --no-sync python -m compileall -q application entrypoints notifications scripts tests *.py — passed
• git diff --check — passed
• uv run --no-sync pytest -q --tb=no — 12 failed, 314 passed, 5 skipped; the same 12 failures were present on the clean origin/main baseline before this change

[github-actions]

🤖 Codex PR Review

✅ Merge allowed: No issues found

---

Review by Codex PR Review bot • PR