all public dashboard stuff changed to static dashboard stuff

README.md

@@ -31,7 +31,6 @@ Start with the [final report](docs/final_report.md). Supporting deliverables:
 - [Private-to-public architecture](docs/architecture.mmd)
 - [10-minute presentation outline](docs/presentation_outline.md)
 - [Dashboard demo script](docs/demo_script.md)
-- [Optional public-hosting notes](docs/bolt_deployment.md)
 
 The [data inventory](docs/data_inventory.md) and archived
 [project options](docs/project_options.md) provide source-discovery history;
@@ -63,7 +62,7 @@ python3 -m venv .venv
 
 The local `.env` contains PostgreSQL connection values and the project-specific
 `VIN_HASH_KEY`; it is excluded from Git. Never put those values in source code,
-screenshots, browser JavaScript, presentation materials, or a Bolt project.
+screenshots, browser JavaScript, or presentation materials.
 
 ## Safe database access in VS Code
 
@@ -165,11 +164,11 @@ authenticate the network transport, so use a trusted demo network.
 
 ## Public hosting is not required
 
-The current presentation plan is the same-network live demo above. Nothing
-needs to be uploaded or published, and the server exposes only the dashboard's
-explicit static-file allowlist. The older
-[public-hosting checklist](docs/bolt_deployment.md) is retained only in case the
-delivery requirements change later.
+The presentation plan is the same-network live demo above. Nothing needs to be
+uploaded or published, and the server exposes only the dashboard's explicit
+static-file allowlist. If public hosting is ever reconsidered, publish only a
+separately reviewed copy of the `dashboard/` directory—never the private source
+repository.
 
 ## Author