Stop the slugifier from deleting the letter D-stroke

.github/workflows/build-practice-images.yml

@@ -88,13 +88,9 @@ jobs:
           cache-from: type=gha,scope=practice-api-gateway
           cache-to: type=gha,mode=max,scope=practice-api-gateway
 
-      # auth-service/api-gateway are NOT in sync_practice_argocd.py's IMAGES
-      # tuple yet — that script fails the whole run if a tag it expects to
-      # rewrite isn't already present inline on the Application, so extending
-      # it must wait until someone has added `authService.image` /
-      # `apiGateway.image` blocks to the live Application by hand (see
-      # infra/helm/medical-chatbot/values-production.yaml). Until then, these
-      # two images are pushed here but must be repointed manually.
+      # All four images advance together as of 2026-08-19: the live Application
+      # now carries `authService.image` / `apiGateway.image` blocks inline,
+      # which was the precondition this note used to describe.
       - name: Point the practice ArgoCD Application at the new images
         env:
           ARGOCD_PRACTICE_URL: ${{ secrets.ARGOCD_PRACTICE_URL }}

.github/workflows/enable-api-gateway.yml

@@ -0,0 +1,20 @@
+name: Enable apiGateway (self-verifying)
+
+# Turns apiGateway back on, then proves chat still answers by driving
+# POST /api/chat. Reverts automatically if it does not -- chat outranks login.
+
+on:
+  workflow_dispatch: {}
+
+jobs:
+  enable:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@v4
+      - name: Enable, verify, self-revert on failure
+        env:
+          ARGOCD_PRACTICE_URL: ${{ secrets.ARGOCD_PRACTICE_URL }}
+          ARGOCD_PRACTICE_PASSWORD: ${{ secrets.ARGOCD_PRACTICE_PASSWORD }}
+        run: python3 .github/scripts/enable_api_gateway_verified.py