feat(scripts): ShmuggingFace preview site builder + Cloudflare Pages deploy (PR 7.2.2)

.gitignore

@@ -239,3 +239,12 @@ release/huggingface-instructor/*
 # under release/_preview_committed/ is the audit-artefact-sync gate
 # and is checked into git separately.
 release/_preview/
+
+# Generated ShmuggingFace site output (PR 7.2.2) — config + dist built by
+# scripts/build_shmuggingface_site.py; deployed to Cloudflare Pages.
+release/_shmuggingface/
+.wrangler/
+
+# Node tooling for ShmuggingFace preview (package.json + package-lock.json
+# are committed; node_modules/ is not).
+node_modules/

package.json

@@ -0,0 +1,12 @@
+{
+  "name": "leadforge-shmuggingface-tooling",
+  "private": true,
+  "description": "Node tooling for the LeadForge ShmuggingFace review site (not published to npm).",
+  "type": "module",
+  "dependencies": {
+    "@shmuggingface/core": "github:ShmuggingFace/ShmuggingFaceCore#v1.0.0"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}

pyproject.toml

@@ -121,6 +121,10 @@ select = ["E", "F", "I", "N", "W", "UP", "B", "C4", "PT", "S"]
 "scripts/preview_hf_page.py" = ["E501"]
 # _preview_common is plain Python (no inline HTML / CSS); leaving
 # E501 enabled.
+# ShmuggingFace site builder shells out to git / node / wrangler with
+# fixed, repo-controlled command lists; S603/S607/S108 are intentional.
+# E501: DISCUSSIONS strings are data (rendered as page content), not source.
+"scripts/build_shmuggingface_site.py" = ["S603", "S607", "S108", "E501"]
 
 [tool.mypy]
 python_version = "3.11"