Phase 12 verified live; MediaMTX config changes documented as restart-only on this setup

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

configure.py

@@ -364,7 +364,8 @@ srtAddress: :8890
 # ---- auth -------------------------------------------------------------
 # Publishing is authorised by dumpd (/mtx-auth) with short-lived tokens minted for Discord-authenticated
 # members of the streamers group. Reads are allowed; viewers are gated by Caddy + Authentik. No passwords.
-# NOTE: MediaMTX hot-reloads paths/recording settings but NOT the auth section — restart after auth changes.
+# NOTE: on this setup (bind-mounted file) MediaMTX does not reload this file live: restart after any change here.
+# Day-to-day operations (streamers, tokens, titles) never touch this file.
 authMethod: http
 authHTTPAddress: http://{auth_gw}:8081/mtx-auth
 authHTTPExclude:
@@ -475,8 +476,9 @@ def apply(domain, admin_pw, streamers, editors, auth_host="", watch_host="", dis
     run(dc + ["up", "-d", "--build"])                      # recreates only services whose compose definition changed
     run(dc + ["restart", "copyparty"])                      # copyparty re-reads its config on start
     run(dc + ["exec", "caddy", "caddy", "reload", "--config", "/etc/caddy/Caddyfile"])   # zero-downtime
-    print("  mediamtx: hot-reloads most of mediamtx.yml, but NOT auth changes. If you changed auth settings, run")
-    print("            docker compose restart mediamtx   between streams (cuts a live recording).")
+    print("  mediamtx: config changes are NOT picked up live on this setup (bind-mounted file). If mediamtx.yml changed,")
+    print("            run  docker compose restart mediamtx  between streams (cuts a live recording). Adding/removing")
+    print("            streamers or tokens never touches mediamtx.yml, so day-to-day nothing restarts.")
 
 def show(domain, admin_pw, streamers, editors, auth_host="", watch_host="", git_host="", bot_host="", live_host=""):
     print(f"\n== domain   : {domain or '(not set)'}")