Sites router

This is the bare apex / marketing fallback. Phase 3 wires per-tenant rendering via the Host header at /_sites/[slug].