move dev scripts to tools/, migrate to bws, use example.com in docs

- Move new-app.sh, new-service.sh, remove-app.sh from scripts/ to tools/
- Migrate new-app.sh and remove-app.sh from bw to bws
- Replace real domains with example.com in documentation and help text

CLAUDE.md

@@ -12,8 +12,9 @@ Actions workflows.
 - `scripts/bootstrap.sh` -- First-time server setup (manual, uses Bitwarden)
 - `scripts/configure.sh` -- Idempotent server config (firewall, certbot, start services; CI-safe)
 - `scripts/deploy.sh` -- SSH-triggered deploy + cert issuance + provision (deploy-*, cert-*, provision commands)
-- `scripts/new-app.sh` -- Single-command new static site (DNS + Gitea repo + cert + deploy + verify)
-- `scripts/new-service.sh` -- Scaffold a new Docker Compose service (compose + workflow)
+- `tools/new-app.sh` -- Single-command new static site (DNS + Gitea repo + cert + deploy + verify)
+- `tools/new-service.sh` -- Scaffold a new Docker Compose service (compose + workflow)
+- `tools/remove-app.sh` -- Remove a static site (local files + Gitea repo)
 - `docker/nginx/` -- Reverse proxy (nginx:alpine + certbot on host)
 - `docker/<domain>/compose.yml` -- Per-app compose files
 - `.gitea/workflows/deploy-<app>.yml` -- Per-app deploy workflows
@@ -21,8 +22,8 @@ Actions workflows.
 
 ## Conventions
 
-- **App name = domain** (e.g., `hcsuzuki.net`)
-- **Container name** = domain with dots replaced by underscores (e.g., `hcsuzuki_net`)
+- **App name = domain** (e.g., `example.com`)
+- **Container name** = domain with dots replaced by underscores (e.g., `example_com`)
 - **Image** = `git.timothykim.net/hantim/<domain>:latest`
 - **Cert name** = config filename without `.conf` (at `/etc/letsencrypt/live/<name>/`)
 - **One domain per conf file** -- deploy.sh derives cert name from filename
@@ -51,13 +52,13 @@ Gitea org-level (`hantim`) secrets/variables:
 
 ### Adding a new static site
 
-Run `./scripts/new-app.sh <domain>` from dev machine. Handles everything:
+Run `./tools/new-app.sh <domain>` from dev machine. Handles everything:
 DNS, Gitea repo, SSL cert, commit/push, build trigger, and verification.
 See USECASES.md for full details.
 
 ### Adding a new Docker service
 
-Run `./scripts/new-service.sh <name>` to scaffold the compose file and deploy
+Run `./tools/new-service.sh <name>` to scaffold the compose file and deploy
 workflow, then edit the compose file and commit.
 
 ### Editing scripts
@@ -85,6 +86,6 @@ No build step. No tests. Verify changes by:
 
 ## Commit style
 
-- Short, lowercase commit messages (e.g., "add hcsuzuki.net", "fix deploy command")
+- Short, lowercase commit messages (e.g., "add example.com", "fix deploy command")
 - Do NOT include "Co-Authored-By" lines
 - Commit only when explicitly asked