chore: fix stale docs, add read_only to config example

- Update COMPONENT_AUDIT.md: replace htmx reference with React SPA
- Add server.read_only to config.example.yaml and CONFIGURATION.md

config.example.yaml

@@ -5,6 +5,7 @@ server:
   host: "0.0.0.0"
   port: 8080
   base_url: "http://localhost:8080"
+  # read_only: false  # Reject all write operations; toggle at runtime with SIGUSR1
 
 database:
   host: "psql.kindred.internal"

docs/COMPONENT_AUDIT.md

@@ -36,10 +36,10 @@ a blank field during a design review or procurement cycle.
 
 ## Design
 
-The audit tool is a new page in the existing web UI (`/audit`), built with
+The audit tool is a page in the web UI (`/audit`), built with the React SPA
-the same server-rendered Go templates + vanilla JS approach as the items and
+(same architecture as the items, projects, and schemas pages). It adds one
-projects pages. It adds one new API endpoint for the completeness data and
+new API endpoint for the completeness data and reuses existing endpoints for
-reuses existing endpoints for updates.
+updates.
 
 ### Completeness Scoring
 

docs/CONFIGURATION.md

@@ -30,12 +30,14 @@ YAML values support environment variable expansion using `${VAR_NAME}` syntax. E
 | `server.host` | string | `"0.0.0.0"` | Bind address |
 | `server.port` | int | `8080` | HTTP port |
 | `server.base_url` | string | — | External URL (e.g. `https://silo.example.com`). Used for OIDC callback URLs and session cookie domain. Required when OIDC is enabled. |
+| `server.read_only` | bool | `false` | Start in read-only mode. All write endpoints return 503. Can be toggled at runtime with `SIGUSR1`. |
 
 ```yaml
 server:
   host: "0.0.0.0"
   port: 8080
   base_url: "https://silo.example.com"
+  read_only: false
 ```
 
 ---