Verify document

Clean replacement build. Keep .env, app/, and storage/ outside the public document root.