Add pricing page with three tiers

.github/workflows/probe-live-site.yml

@@ -0,0 +1,57 @@
+# Diagnostic: identifies which build each public host is serving, using the
+# sign-in page copy as a version marker ("Operator sign-in" = pre-team-auth
+# code, "Workspace sign-in" = current main). Manually triggered only.
+name: probe-live-site
+on: workflow_dispatch
+
+jobs:
+  probe:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Recent deployments and their outcomes
+        env:
+          GH_TOKEN: ${{ github.token }}
+          REPO: ${{ github.repository }}
+        run: |
+          curl -s -H "Authorization: Bearer $GH_TOKEN" \
+            "https://api.github.com/repos/$REPO/deployments?per_page=12" -o /tmp/deps.json
+          echo "created_at | environment | commit | latest_status"
+          jq -r '.[] | [.id, .environment, (.sha[0:7]), .created_at] | @tsv' /tmp/deps.json |
+          while IFS=$'\t' read -r id env sha created; do
+            state=$(curl -s -H "Authorization: Bearer $GH_TOKEN" \
+              "https://api.github.com/repos/$REPO/deployments/$id/statuses?per_page=1" | jq -r '.[0].state // "no-status"')
+            echo "$created | $env | $sha | $state"
+          done
+
+      - name: Vercel platform status
+        run: |
+          curl -s --max-time 15 "https://www.vercel-status.com/api/v2/summary.json" |
+            jq -r '"overall: " + .status.description, (.incidents[]? | "INCIDENT: " + .name + " [" + .status + "]"), (.components[]? | select(.status != "operational") | "component degraded: " + .name + " = " + .status)' \
+            || echo "couldn't fetch vercel status"
+
+      - name: Auth health on production
+        run: |
+          echo "GET https://ghimtech.org/api/health/auth"
+          curl -s --max-time 20 "https://ghimtech.org/api/health/auth" | head -c 500; echo
+
+      - name: Identify served version per host
+        run: |
+          for url in \
+            "https://ghimtech.org/sign-in" \
+            "https://www.ghimtech.org/sign-in" \
+            "https://ghim-tech.vercel.app/sign-in" \
+            "https://ghim-tech-reyghim1093-5928s-projects.vercel.app/sign-in"; do
+            echo "===================="
+            echo "URL: $url"
+            code=$(curl -sL -o /tmp/page.html -w '%{http_code}' --max-time 20 "$url" || echo "FETCH_FAILED")
+            echo "HTTP: $code"
+            grep -o "Workspace sign-in · team access" /tmp/page.html | head -1 && echo "--> NEW code (post-merge)" || true
+            grep -o "Operator sign-in · restricted access" /tmp/page.html | head -1 && echo "--> OLD code (pre-merge)" || true
+            if ! grep -qE "Workspace sign-in|Operator sign-in" /tmp/page.html; then
+              echo "--> no marker found (different app or error page); first 300 chars:"
+              head -c 300 /tmp/page.html; echo
+            fi
+          done
+          echo "===================="
+          echo "ghimtech.org response headers:"
+          curl -sI --max-time 20 https://ghimtech.org | head -12