The marketing site is intentionally its own codebase. It can publish content, capture leads, and run analytics without touching the authenticated product app.

Production deployments should configure strict environment variables, least-privilege CMS tokens, and isolated domains for the landing app and product app.