docs(web): add Firewalls to docs sidebar + Compatibility page in Tech menu

- web/src/data/docsNav.ts: Operations section gets a 'Firewalls & Compat Mode'
  entry pointing at /docs/firewalls (the page exists but was unreachable from
  the sidebar).
- web/src/components/Nav.astro: Tech dropdown gets a 'Compatibility' entry
  pointing at /for/compatibility.
- web/src/pages/for/compatibility.astro: NEW. Full deployment matrix —
  PaaS (Render, Railway, Fly, Heroku, DO, Northflank, Coolify/CapRover),
  serverless (Lambda, Cloud Run, Vercel/Netlify Functions, Cloudflare Workers),
  VMs / IaaS, k8s (vanilla + managed), coding-agent sandboxes (Cursor, Replit
  Agent, Devin, Modal, E2B, Daytona, Codespaces, Gitpod, Coder, Manus, plus
  the 'wrong runtime' Lovable/v0/Bolt class), desktop/local (macOS LaunchAgent,
  systemd, tmux). Each row maps to one of {udp, compat, compat+proxy,
  wrong-runtime}. Plus a corporate-egress matrix (open / TCP-443-only /
  HTTP CONNECT / TLS interception / HTTP-proxy-only / domain allowlist /
  DPI) and 5 worked install examples (Render Dockerfile, k8s sidecar,
  macOS, forced-compat systemd, AWS-Lambda-don't).

Author: teovl

web/src/components/Nav.astro

@@ -10,9 +10,10 @@ const forLinks = [
 ];
 
 const techLinks = [
-  { href: '/for/networks',   label: 'Networks',      desc: 'Backbones, private fleets, data exchanges' },
-  { href: '/for/skills',     label: 'Skills',        desc: 'Agent skills, one command each' },
-  { href: '/for/setups',     label: 'Orgs',          desc: 'Pre-wired multi-agent fleets' },
+  { href: '/for/networks',      label: 'Networks',      desc: 'Backbones, private fleets, data exchanges' },
+  { href: '/for/skills',        label: 'Skills',        desc: 'Agent skills, one command each' },
+  { href: '/for/setups',        label: 'Orgs',          desc: 'Pre-wired multi-agent fleets' },
+  { href: '/for/compatibility', label: 'Compatibility', desc: 'Per-environment deployment modes' },
 ];
 
 // Pull latest release version from GitHub at build time.

web/src/data/docsNav.ts

@@ -53,7 +53,9 @@ export const docsNav: NavItem[] = [
   { label: 'Blueprints', href: '/docs/enterprise-blueprints', slug: 'enterprise-blueprints',
     icon: '<svg viewBox="0 0 24 24"><rect x="3" y="3" width="18" height="18" rx="2" ry="2"/><line x1="3" y1="9" x2="21" y2="9"/><line x1="9" y1="21" x2="9" y2="9"/></svg>' },
   // Operations
-  { section: 'Operations', label: 'Diagnostics', href: '/docs/diagnostics', slug: 'diagnostics',
+  { section: 'Operations', label: 'Firewalls & Compat Mode', href: '/docs/firewalls', slug: 'firewalls',
+    icon: '<svg viewBox="0 0 24 24"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="M9 12l2 2 4-4"/></svg>' },
+  { label: 'Diagnostics', href: '/docs/diagnostics', slug: 'diagnostics',
     icon: '<svg viewBox="0 0 24 24"><polyline points="22 12 18 12 15 21 9 3 6 12 2 12"/></svg>' },
   { label: 'Configuration', href: '/docs/configuration', slug: 'configuration',
     icon: '<svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="3"/><path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 0 1 0 2.83 2 2 0 0 1-2.83 0l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 0 1-2 2 2 2 0 0 1-2-2v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 0 1-2.83 0 2 2 0 0 1 0-2.83l.06-.06A1.65 1.65 0 0 0 4.68 15a1.65 1.65 0 0 0-1.51-1H3a2 2 0 0 1-2-2 2 2 0 0 1 2-2h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 0 1 0-2.83 2 2 0 0 1 2.83 0l.06.06A1.65 1.65 0 0 0 9 4.68a1.65 1.65 0 0 0 1-1.51V3a2 2 0 0 1 2-2 2 2 0 0 1 2 2v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 0 1 2.83 0 2 2 0 0 1 0 2.83l-.06.06a1.65 1.65 0 0 0-.33 1.82V9a1.65 1.65 0 0 0 1.51 1H21a2 2 0 0 1 2 2 2 2 0 0 1-2 2h-.09a1.65 1.65 0 0 0-1.51 1z"/></svg>' },