[luinbytes]

Summary

• Redact 29 machine-specific workspace-path occurrences across the checked-in review artifacts. The existing decision-log file remains in place; with the owner's approval, its private row is replaced by six [REDACTED] cells.
• Add a refs/heads/master condition to the Pages deployment job so a manual dispatch from another branch cannot deploy.
• Leave the public privacy notice unchanged.

The workflow condition is a guard against accidental/non-master manual deployments, not a security boundary against someone with repository write access who can change the workflow. Stronger enforcement would require GitHub Pages/environment branch restrictions; this PR does not change those settings.

Verification

• Checked all 17 changed files on the branch: no /Users/ or Windows user-path strings remain, the decision row is fully redacted, and the guard appears once under the deploy job.
• GitHub Actions run #52 passed: dependency audit, lint, pond tests, and production browser suite.
• The full suite was not run locally because the connected checkout is 28 commits behind this branch base and direct GitHub fetch is blocked by the computer's network policy.