docs: add agents.aiki.as route map

[JonathanAIKI]

Documents the public widget gallery URL/query pattern, stable selectors, shadow-root boundary, Studio auth behavior, and the Cloudflare path-allowlist trap. Contains no credentials or user-specific state.

---

Summary by cubic

Documents the agents.aiki.as public widget gallery routes, stable selectors, Studio auth behavior, and Cloudflare Tunnel allowlist so tests and ops avoid flaky navigation, tunnel 404s, and credential leaks.

• Prefer direct URL navigation: use ?agent=<slug> and ?variant=spotlight|classic; widget host is [data-aiki-widget] with an open shadow root.
• Accessing /studio requires X-Admin-Key; never put admin keys in URLs.
• Add any new public route to the Cloudflare Tunnel path allowlist to prevent tunnel-level 404s.
• wait_for_load() does not cover widget transitions; wait ~500 ms after open/close before screenshots.

^{Written for commit afa0b66. Summary will update on new commits.}

[browser-harness-review]

✅ Skill review passed

Reviewed 1 file(s) — no findings.

[cubic-dev-ai]

No issues found across 1 file

_{Re-trigger cubic}