Move to escapement.warehack.ing; fix GFM tables in MDX

The landing page's headline results table was rendering as a paragraph of raw
pipe characters. Astro applies remark-gfm to .md but it wasn't reaching the MDX
pipeline, so every .md page rendered tables fine and only index.mdx was broken —
which is exactly why it went unnoticed. mdx({remarkPlugins:[remarkGfm]}) fixes it.

cuckoo.warehack.ing stays as a permanent redirect; it was live briefly.

docs-site/docker-compose.yml

@@ -2,7 +2,7 @@
 #
 # Default (no --profile flag):
 #   prod-style — Caddy serves the built dist/. Use for production-like
-#   deploys (the public site at cuckoo.warehack.ing runs this).
+#   deploys (the public site at escapement.warehack.ing runs this).
 #
 # --profile dev:
 #   Astro dev server with HMR. Volume mounts on src/ so edits hot-reload.
@@ -13,7 +13,7 @@
 #
 # Both services attach to the external `caddy` network and expose
 # themselves to caddy-docker-proxy via labels. Edit DOMAIN in .env to
-# switch between cuckoo.warehack.ing (prod) and cuckoo.l.warehack.ing
+# switch between escapement.warehack.ing (prod) and escapement.l.warehack.ing
 # (local-dev tier).
 
 services:
@@ -28,10 +28,16 @@ services:
     networks:
       - caddy
     labels:
-      caddy: ${DOMAIN:-cuckoo.warehack.ing}
+      caddy: ${DOMAIN:-escapement.warehack.ing}
       caddy.reverse_proxy: "{{upstreams 80}}"
       # encode + gzip already in the container; let caddy pass through.
 
+      # The site was briefly live at cuckoo.warehack.ing before the rename. Keep
+      # the old host as a permanent redirect rather than letting any link that
+      # escaped rot. {uri} preserves the path, so deep links survive too.
+      caddy_1: cuckoo.warehack.ing
+      caddy_1.redir: https://escapement.warehack.ing{uri} permanent
+
   docs-dev:
     profiles: ["dev"]
     build:
@@ -41,7 +47,7 @@ services:
     container_name: cuckoo-escapement-docs-dev
     restart: unless-stopped
     environment:
-      - DOMAIN=${DOMAIN:-cuckoo.l.warehack.ing}
+      - DOMAIN=${DOMAIN:-escapement.l.warehack.ing}
       - ASTRO_TELEMETRY_DISABLED=1
     volumes:
       # Hot-reload bind mounts. node_modules stays inside the container
@@ -53,7 +59,7 @@ services:
     networks:
       - caddy
     labels:
-      caddy: ${DOMAIN:-cuckoo.l.warehack.ing}
+      caddy: ${DOMAIN:-escapement.l.warehack.ing}
       caddy.reverse_proxy: "{{upstreams 4321}}"
       # Vite HMR over WebSocket. Caddy's defaults close "idle" WS
       # connections after ~10-15s; HMR doesn't send app-level pings, so