deploy(labtools-pro): b LIVE on vds-kzntsv — cutover done, labtools.pro on VDS

DNS flip confirmed at authoritative ns1.reg.ru (Resolve-DnsName) + 8.8.8.8 ->
89.253.255.94 (labtools.pro/www; NOT labtools.ru). Earlier checks hit stale TTL
cache; authoritative NS was the truth.

Stack 19 traefik-rule -> Host(labtools.pro)||Host(www.labtools.pro) via Portainer
PUT (env 8/8 preserved, pullImage=false). LE cert issued instantly (ssl_verify=0).
Live-smoke GREEN: both hosts 200 (nav+catalog+products), redirects parity, sitemap
index host=www, real content (lang=en). Staging host removed (->404). External
check from RUVDS box: labtools.pro/www -> 89.253.255.94 HTTP 200 trusted cert.
RUVDS labtools.pro left intact as rollback.

Task closed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

host-stacks/vds-kzntsv/labtools-pro.compose.yml

@@ -47,9 +47,10 @@ services:
     labels:
       traefik.enable: "true"
       traefik.http.routers.labtools-pro.entrypoints: websecure
-      # STAGING rule. Cutover: заменить на Host(`labtools.pro`) || Host(`www.labtools.pro`)
-      # ТОЛЬКО ПОСЛЕ флипа DNS на 89.253.255.94 (иначе LE HTTP-01 упадёт на RUVDS → rate-limit).
-      traefik.http.routers.labtools-pro.rule: Host(`labtools-pro.vds.kzntsv.site`)
+      # CUTOVER 2026-07-02: DNS labtools.pro/www флипнут на VDS (89.253.255.94) оператором.
+      # Проверено авторитетным ns1.reg.ru + 8.8.8.8 → 89.253.255.94 (НЕ labtools.ru!). Боевые хосты.
+      # staging-хост labtools-pro.vds.kzntsv.site УБРАН post-cutover. RUVDS IIS 80.64.31.36 — rollback, не тронут.
+      traefik.http.routers.labtools-pro.rule: Host(`labtools.pro`) || Host(`www.labtools.pro`)
       traefik.http.routers.labtools-pro.tls.certresolver: letsEncrypt
       traefik.http.services.labtools-pro.loadbalancer.server.port: "5000"