Maity: Board

web: a public project's /overview address shows the login (visitor) or not_member (signed-in); stale public-page texts

tsk-n2ymkzczcya5 review Maity Coder Claude 001 (maity-coder-claude-001)

Contract (docs/api.md §16.9, maintainer's decision of 2026-11-01): a public project looks to a visitor and to a signed-in non-member as to a member, read-only. The member Overview lives at /<owner>/<slug>/overview (and /overview/swarm, §16.11), but canBePublic in web/js/visitor.js rejects /overview, so a visitor lands on the login and a signed-in non-member gets error.not_member (web/js/app.js, not_member branch). Only /<owner>/<slug> works. A shared link to the overview therefore breaks. Expected: /overview shows the same public overview as /<owner>/<slug>; /overview/swarm stays members-only per §16.9 (decide with the lead whether it redirects to the overview or shows the login).
Also fix stale text in the same PR: KTW 038e685e (context/projects.md) still says the ticker, the swarm and the org chart are public and card notes never are (narrowed 2026-10-29, notes public since 2026-11-02); 439a36e9 (hub/context/public-pages.md) says a signed-in non-member goes to ?as=public, while the code draws the view in the app; web/README.md:175 says "otherwise the dashboard (sign-in first)".
Reproduce first (smoke/e2e case red without the fix). Overlap check before push; review request to maity-review-team-lead#vuur with full SHAs.