chore: scrub deployment hostnames from comments

Replace the two literal homelab domains in doc comments (the headless-render
reference URL and the Authentik TLS-verify note) with generic descriptions
("the hosted viewer", "the configured Authentik host"). Comments only.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: Krande

deploy/Dockerfile.viewer

@@ -74,7 +74,7 @@ ENV PATH="/env/bin:$PATH"
 # prefix (/work/.pixi/envs/viewer-api-slim/ssl), which no longer exists
 # after the env is COPY'd to /env. urllib (used by PyJWKClient for the
 # JWKS fetch) honours OpenSSL's default path, so without this it can't
-# verify TLS to authentik.krande.no and every token check 401s — while
+# verify TLS to the configured Authentik (OIDC) host and every token check 401s — while
 # httpx-based discovery still works via certifi, hence callback-OK but
 # /api/me-401. Point OpenSSL/urllib at the CA bundle in its new location.
 ENV SSL_CERT_FILE=/env/ssl/cert.pem \

src/ada/visit/rendering/chromium_offscreen_utils.py

@@ -8,9 +8,9 @@
 margin-multiplier semantics aren't obvious from the field name alone).
 
 So instead we drive a headless Chromium through Playwright, mount the
-exact same `dist-embed/index.js` paradoc consumes, and screenshot the
-canvas. The output is then bit-identical to what `paradoc.krande.no`
-renders in the user's tab.
+exact same `dist-embed/index.js` the hosted viewer consumes, and
+screenshot the canvas. The output is then bit-identical to what the
+deployed embed renders in the user's tab.
 
 Usage::