Ora CloudFront rehearsal

This independent test site verifies CloudFront onboarding, origin routing, and Route53 Alias restoration.

Fixture: ora-cloudfront-20261110