Records why, so the next person doesn't rebuild the trap: a branch off main
carries a full copy of the app it has no reason to have and drifts behind it,
and syncing it via `git merge origin/main` silently replaces the instance
manifests with main's placeholders — no conflict, because only main touches
those paths.
instance/dnspegasus has been converted accordingly.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>