v1.3.6

Changed

• soumission-sitemaps adds the site to Bing by hand, with DNS verification, and no longer uses the import from Google Search Console: the import fails when the account signed in to Bing is not the one that owns the Search Console property, which only shows at the end (seen while recording on 2026-10-21), and it gives Bing access to Search Console data. The manual add worked on the first try.
• site-publii-cloudflare prefers Claude in Chrome, which drives the person's own Chrome with its sessions already open, over the app's built-in browser, which starts signed out of everything.
• formulaire-contact-cloudflare now goes through Cloudflare's MCP server first, in one execute call that needs neither Node.js nor Wrangler: Turnstile widget (managed, no clearance), Worker uploaded as a module with its plain-text, send_email and secret_text bindings, then the route, returning the site key, Worker name, bindings and route but never the secret (tried on 2026-10-21 on a machine without Node.js); Wrangler becomes the fallback. It starts with a one-call survey of the zone (DNS and MX records, Email Routing, verified addresses, existing widgets, Workers and routes) and asks only what is left, checks the Worker with three requests that send no email (405, 400, 403), makes the thank-you page noindex, follow with a link back to the home page, warns that Publii's visual editor can strip the form or the Turnstile script, and splits the test: the agent fills in the form and checks the consent box, the person clicks Turnstile and Send, since Turnstile stopped the agent's own submission in a rehearsal. decouvrabilite-google-et-ia notes that on Publii's default theme the page title is the H1, so the page text starts with the answer paragraph and no <h1>.
• site-publii-cloudflare, from the same rehearsal's notes: no manual first sync (the person pastes the keys, saves and closes Publii; the agent's first desktop-sync publishes the content and tests the keys, so an empty theme never goes online); the exact /mcp wording (/mcp cloudflare is rejected); both sign-ins asked for at the start; a one-call Cloudflare survey; www added by default (AAAA 100:: proxied and a 301 dynamic redirect); the direct R2 token page and the clicks that need checking; the page title as the H1; internal links as #INTERNAL_LINK#/page/<id> in a second batch; four grouped consents; where to read AGENTS.md, which the pip package does not include; hero.jpg as the home image's name; an accent check on the published pages.