Stop mislabeling the Compose box as production in read-only audits

.github/workflows/audit-production-runtime.yml

@@ -1,4 +1,10 @@
-name: Audit production runtime (read-only)
+name: Audit Compose rollback box (read-only)
+
+# `realvuxbaro.me` has run on k3s since the 2026-08-17 cutover; this workflow
+# still SSHes into secrets.EC2_HOST, which is the retired Compose EC2 kept
+# only as a manual DNS fallback. Useful for confirming that box is still
+# healthy and on a known commit before relying on it as a fallback — it does
+# NOT reflect what real production is currently running.
 
 on:
   workflow_dispatch:
@@ -14,7 +20,7 @@ jobs:
   audit:
     runs-on: ubuntu-latest
     steps:
-      - name: Inspect production over SSH
+      - name: Inspect the Compose rollback box over SSH
         uses: appleboy/ssh-action@v1.0.3
         with:
           host: ${{ secrets.EC2_HOST }}