[codex] Enable production analytics sends

[JBallin]

Summary

• deploys and verifies the Cloudflare Worker/D1 analytics backend for issue Enable production analytics sends #185
• enables production analytics sends through the verified workers.dev endpoint and public client token
• updates backend/analytics docs from setup-gated wording to the durable production state

Deployment and Verification

• Worker URL: https://ballin-scripts-analytics.jballin.workers.dev/v1/events
• D1 migration applied remotely to ballin-scripts-analytics
• Worker deploy confirmed ANALYTICS_DB and ANALYTICS_RATE_LIMITER bindings
• Synthetic checks passed:
  • valid event returned 204
  • missing token returned 401
  • unsupported payload field returned 400
  • invalid command enum returned 400
• Remote D1 inspection confirmed a 64-character hashed install/day row plus aggregate command/runtime counts only

Local DNS had not propagated yet for the newly registered workers.dev hostname during verification, so the synthetic requests used the real HTTPS hostname with curl --resolve pinned to a Cloudflare DNS result.

Validation

• npm test passed: 223 passing

Closes #185.
Updates #82.