The template's new `site.origin` key arrived empty, as bootstrap fills it in. Pointing it at the origin robots.txt and sitemap.xml already carry turns on the canonical and hreflang links, and the HTTPS redirect the production compose already trusts the forwarded proto for.