Prep kiosk-app for submodule split

serving/kiosk-app/README.md

@@ -33,19 +33,28 @@ npm run dev      # http://localhost:5173/kiosk/
 
 ## Build the container
 
-It builds as part of the serving stack:
+This is an **independent project** with its own CI. The build is standalone:
 
 ```bash
-cd ..            # serving/
-docker compose build kiosk
-docker compose up -d
-# main nginx serves it at http://${SERVER_IP}/kiosk/  (kiosk_url default)
+docker build -t fleet-kiosk:dev .
+docker run --rm -p 8088:80 fleet-kiosk:dev   # http://localhost:8088/
 ```
 
-The container publishes on `127.0.0.1:${KIOSK_APP_PORT:-8088}`; the host-network
-main nginx proxies `/kiosk/` to it. To point the diskless kiosk here, keep the
-Packer `kiosk_url=http://boot.fleet.lab/kiosk/` default (resolved to the serving
-host by the stack's dnsmasq).
+CI ([.gitea/workflows/ci.yaml](.gitea/workflows/ci.yaml)) builds + pushes
+`git.bitasylum.org/audiobuzz/fleet-kiosk` (branch-aware tags; `:latest` on
+`main`). The fleet **serving stack consumes the published image** — it sets
+`KIOSK_IMAGE`/`KIOSK_VERSION` in its `.env` and the `kiosk` compose service pulls
+it (publishing on `127.0.0.1:${KIOSK_APP_PORT:-8088}`, proxied at `/kiosk/`). For
+local serving-stack dev you can instead uncomment `build: ./kiosk-app` on that
+service. To point the diskless kiosk here, keep the Packer
+`kiosk_url=http://boot.fleet.lab/kiosk/` default (resolved by the stack's dnsmasq).
+
+## Relationship to the fleet repo
+
+Consumed by `diskless-workstation` as a **git submodule** at `serving/kiosk-app/`.
+This repo owns the app + its image; the OS-side kiosk runtime (weston, Chromium
+lockdown, `kiosk-session`, the systemd unit) lives in that parent repo under
+`files/kiosk/`. See [CLAUDE.md](CLAUDE.md) for the integration contracts.
 
 ## Replacing the dummy data