docs: switch fetch commands to rb.godwinsystems.com

The ops -> godwinsystems org move would have made every hand-typed onsite
command 10 characters longer, against the whole reason filenames here are
short. A redirect host makes them shorter than they ever were:

  irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/od-smb-cred.md
  irm rb.godwinsystems.com/od-smb-cred.md

Flips all 6 hardcoded URLs and documents what the hostname is, where the
route is defined, and that removing it means updating these commands in
the same change.

Verified before committing: the short and canonical URLs return
byte-identical content for 5 files, the scheme-less http:// form resolves
through 301 -> 302 -> 200, bare / lands on the repo page, and a missing
file still 404s at the right path.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HwcG1jLs1T425QRMxtjxP7

README.md

@@ -17,19 +17,39 @@ client workstations during on-site work with short, hand-typeable commands.
 Fetch and read on the target workstation:
 
 ```powershell
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/<file> | more
+irm rb.godwinsystems.com/<file> | more
 ```
 
 Run an executable runbook script directly (scripts live under `scripts/`):
 
 ```powershell
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/<file>.ps1 | iex
+irm rb.godwinsystems.com/scripts/<file>.ps1 | iex
 ```
 
 Scripts prompt for anything client-specific via `Read-Host` — nothing to edit
 before running. See [`scripts/_template.ps1`](scripts/_template.ps1) for the
 convention.
 
+No scheme is needed: PowerShell defaults a scheme-less URI to `http://`, and
+`rb.godwinsystems.com` answers on :80 with a 301 to HTTPS.
+
+### About that hostname
+
+`rb.godwinsystems.com` is a 302 redirect to this repo's raw path on Gitea. It
+exists because these commands are hand-typed on client machines, often
+mid-incident — the canonical URL is 63 characters before the filename. The
+canonical form still works and is what the redirect targets:
+
+```
+https://gitea.ivangodwin.com/godwinsystems/rb/raw/branch/main/<file>
+```
+
+The redirect is a backendless Gateway API `HTTPRoute` defined in
+`kubernetes-gitops` at `manifests/apps/rb-redirect/`, with a listener on the
+public gateway and a DNS-only A record for `rb`. **If that route is ever
+removed, update the commands above in the same change** — otherwise every
+runbook here documents a dead URL.
+
 ## Layout & naming
 
 - **Runbooks** (`.md`) live flat at the repo root with short, hand-typeable

od-backup-schedule.md

@@ -67,7 +67,7 @@ schtasks /Create /TN "OD Backup Health Check" ^
 The check is **read-only** — no DB, no service, no file changes — so it's safe to run any time, including a manual spot-check:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/od-backup-check.ps1 | iex
+irm rb.godwinsystems.com/scripts/od-backup-check.ps1 | iex
 ```
 
 ---

od-cfg-persist.md

@@ -44,7 +44,7 @@ Grant the built-in **Users** group **Modify** on `FreeDentalConfig.xml` so Open
 Fastest, from an **elevated** PowerShell:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/od-cfg-acl.ps1 | iex
+irm rb.godwinsystems.com/scripts/od-cfg-acl.ps1 | iex
 ```
 
 It resolves the install path (64-bit / 32-bit Program Files), confirms, and grants the permission.

od-db-backup.md

@@ -56,7 +56,7 @@ The script below does both, and **always restarts the service** (even if the cop
 From an **elevated** PowerShell on the server:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/od-db-backup.ps1 | iex
+irm rb.godwinsystems.com/scripts/od-db-backup.ps1 | iex
 ```
 
 It will:

od-smb-cred.md

@@ -41,7 +41,7 @@ System Summary → **Virtualization-based security Services Running**
 Fastest, from an **elevated** PowerShell:
 
 ```
-irm https://gitea.ivangodwin.com/ops/rb/raw/branch/main/scripts/cg-disable.ps1 | iex
+irm rb.godwinsystems.com/scripts/cg-disable.ps1 | iex
 ```
 
 It confirms, clears the flags, and prompts to reboot.