domain cutover (host side): oc.ci host + recipe-report URLs + cc-ci input to c5106bc

- opencode UI: opencodeUiHost=oc.ci.autonomic.zone with the legacy name kept via the new
  opencodeUiExtraHosts (dual traefik router rule + nginx serverAliases) during the bake.
- networking.hosts: new names pinned, legacy names kept.
- recipe-report.py: publish/verify/footer URLs → report.ci.autonomic.zone.
- flake.lock: cc-ci input → c5106bc (PR #39 + #40: dual-zone SAN cert, front-door rules,
  drone rename, harness naming).

flake.lock

@@ -10,11 +10,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1789404337,
-        "narHash": "sha256-FY5oOz/C6i6Ct6Qe6DqN6nOq+TXCyiZq5Am1LKLpDss=",
+        "lastModified": 1790009762,
+        "narHash": "sha256-pg5aOho9rJZmHtuGwiQgaW/uQ01vFb0f6lKsH+BB62o=",
         "ref": "refs/heads/main",
-        "rev": "eb5fb826114f2b141dffb270fd36f7a22d1bf343",
-        "revCount": 1550,
+        "rev": "c5106bc1eb3bcb1b8056b1f1bd2ed8ae7b652503",
+        "revCount": 1554,
         "type": "git",
         "url": "https://git.autonomic.zone/recipe-maintainers/cc-ci.git"
       },