add blog entry

README.md

@@ -304,10 +304,22 @@ The launcher locates the repository containing its script, fetches metadata
 from the configured `origin`, and reports the current branch, upstream,
 working-tree changes, and ahead/behind state in plain language. It offers only
 fast-forward pulls for a clean, remote-ahead checkout and normal, non-force
-pushes for a local-ahead checkout. Diverged histories, missing tracking
-configuration, and dirty pulls require manual review. Refresh rechecks the
-state without restarting the window. Each editor is started as a separate
-Python process and remains directly runnable with its documented command.
+pushes. **Commit & Push** captures every path to be staged, previews the first
+40 with a count of any additional paths, requires a commit message for
+working-tree changes, warns that pushing `main` deploys production, and
+proceeds only after explicit confirmation. If the checkout already has
+local commits, the same control can push them without creating another commit.
+Diverged histories, remote-ahead publishing, missing tracking configuration,
+and dirty pulls require manual review. Refresh rechecks the state without
+restarting the window. Each editor is started as a separate Python process and
+remains directly runnable with its documented command.
+
+The management launcher and standalone devlog editor use Git from `PATH` when
+it is available. On Windows, they fall back to
+`support/PortableGit/cmd/git.exe`; the bundled runtime explicitly uses its
+included Git Credential Manager rather than the first-use helper selector.
+Authentication is established per workstation through the normal credential
+manager flow. Never place a username or token in the repository remote URL.
 
 ### Local blog editor
 
@@ -388,8 +400,8 @@ devlog records remain owned by the external project repository under
 `.labyricorn/`. Its explicit **Check Devlog Status** action performs the
 importer's public-provider and remote-snapshot validation against a disposable
 read-only Git mirror, then removes that mirror. When setup is missing, the
-editor directs the user to copy the standalone `devlog_editor.py` into the
-project checkout, initialize and author the devlog, publish the changes, and
+editor directs the user to copy the standalone `scripts/devlog_editor.py` into
+the project checkout, initialize and author the devlog, publish the changes, and
 recheck. It never edits, commits, or pushes an external project repository.
 
 ## Production filesystem and permissions
@@ -914,3 +926,5 @@ Before changing deployment, nginx, TLS, firewall, credentials, or admin access:
 
 This README describes the current verified installation on `ubuntu2-47`. Update
 it whenever the operational architecture changes.
+
+User Note: Check 'C:\Users\-username-\AppData\Local\pipx\pipx\venvs\lektor' for existing lektor install