Add build & deploy runbook

[tcatapano]

Adds BUILD_AND_DEPLOY.md, a practical runbook for building and deploying the DCE (edition640), based on the process as actually run and verified July 2026.

Contents:

• Overview of which repo builds the site and the three data repos it consumes
• One-time prerequisites (Node 14 pin, deps, mk-aws AWS profile)
• Build checklist (bump Build ID → pull data → seed thumbnails → run/migrate → build → prune → verify)
• Local preview checklist (local target + dev server, with the CORS caveat)
• Deploy checklist (S3 upload → CloudFront OriginPath flip → invalidate → verify) with a distribution-ID table and rollback steps
• Gotchas documenting where the current README.md is out of date: Node 14 vs the hardcoded --openssl-legacy-provider flag, the retired Google Drive workflow, the thumbnails.json requirement, local-vs-staging baked-in URLs, the AWS account trap, and the pandoc bibliography issue (Render inline figures and captions, make grid mode the default view, and render ups elements. #214).

Intended to complement/supersede the deployment sections of README.md.

🤖 Generated with Claude Code