Landing page: fix the four broken-link references

Audit found two unresolved subdomains being linked from public/index.html:

- **status.zeroauth.dev** (2 spots) — footer brand-column "All systems
  operational" pill + the footer social-icons-row Status link.
  Subdomain DNS doesn't resolve. Repointed both to /api/health which is
  a real endpoint that returns API + Postgres + Redis + Base Sepolia
  health as JSON. Kept the "All systems operational" copy because the
  underlying health check is real; added a title tooltip noting that
  a dedicated status.zeroauth.dev page is on the roadmap.

- **api.zeroauth.dev** (2 spots) — both Quickstart curl examples in
  the code-tabs section pointed at https://api.zeroauth.dev/v1/...
  The subdomain doesn't resolve. The canonical API URL is
  https://zeroauth.dev/v1/... (apex domain, no subdomain). Updated
  both curl examples accordingly so a developer copy-pasting them
  gets a 401 (auth required) instead of DNS-refused.

Smoke-probed all 18 clickable hrefs after the edits — all return 200
(the two 404s in the smoke output are <link rel="preconnect"> hints to
fonts.googleapis.com / fonts.gstatic.com root URLs; the actual font
CSS request /css2?family=Inter... 200s correctly, and those preconnect
URLs are correct standard behaviour, not user-facing links).

Cross-repo sweep clean: no api.zeroauth.dev or status.zeroauth.dev
refs left in docs/, dashboard/, or website/ (Docusaurus source). The
governance repo's incident-response.md still mentions status.zeroauth.dev
intentionally — flagged there as "planned, not yet wired up" rather
than as a live URL.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: pulkitpareek18

public/index.html

@@ -1036,7 +1036,7 @@ <h3 style="margin-top:1.5rem;">3. Verify the proof</h3>
             <button class="code-copy" type="button" data-copy="curl">Copy</button>
           </div>
           <div class="code-pane active" data-pane="curl"><pre class="code-body" id="code-curl"><span class="cmt"># 1. Register a user with a commitment</span>
-curl -X POST https://api.zeroauth.dev/v1/users/register \
+curl -X POST https://zeroauth.dev/v1/users/register \
   -H <span class="str">"Authorization: Bearer $ZEROAUTH_API_KEY"</span> \
   -H <span class="str">"Content-Type: application/json"</span> \
   -d <span class="str">'{
@@ -1045,7 +1045,7 @@ <h3 style="margin-top:1.5rem;">3. Verify the proof</h3>
   }'</span>
 
 <span class="cmt"># 2. Verify a Groth16 proof at login</span>
-curl -X POST https://api.zeroauth.dev/v1/verifications \
+curl -X POST https://zeroauth.dev/v1/verifications \
   -H <span class="str">"Authorization: Bearer $ZEROAUTH_API_KEY"</span> \
   -H <span class="str">"Content-Type: application/json"</span> \
   -d <span class="str">'{
@@ -1480,7 +1480,7 @@ <h3>Pramaan: Zero-Knowledge Biometric Authentication</h3>
             ZeroAuth
           </div>
           <p class="footer-tagline">Auth API where a breach exposes nothing. Built on the patented <strong style="color:var(--text-secondary);font-weight:600;">Pramaan&trade;</strong> zero-knowledge biometric protocol.</p>
-          <a href="https://status.zeroauth.dev" target="_blank" rel="noopener" class="footer-status">
+          <a href="/api/health" target="_blank" rel="noopener" class="footer-status" title="JSON health endpoint — covers API, Postgres, Redis, and the Base Sepolia blockchain RPC. A dedicated status.zeroauth.dev page is on the roadmap.">
             <span class="footer-status-dot"></span>
             All systems operational
           </a>
@@ -1539,7 +1539,7 @@ <h4>Company</h4>
           <a href="/docs" aria-label="Documentation">
             <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20"/><path d="M6.5 2H20v20H6.5A2.5 2.5 0 0 1 4 19.5v-15A2.5 2.5 0 0 1 6.5 2z"/></svg>
           </a>
-          <a href="https://status.zeroauth.dev" target="_blank" rel="noopener" aria-label="Status">
+          <a href="/api/health" target="_blank" rel="noopener" aria-label="Health" title="JSON health endpoint">
             <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"/></svg>
           </a>
         </div>