fix: vendor per-kind sites in the hub; drop stale blog docs

- collect.py: when a kind points at the shared site root, copy only the
  per-kind subdir (site/lib -> <repo>/lib) instead of the whole site, so
  stray single-site build output never leaks into the hub
- Purge stale collected artifacts (404.html, assets/, search/, sitemaps,
  objects.inv, duplicate mcp/) from every repo dir, matching the cleaned
  source site/ roots
- Refresh collected output from source repos, incl. the khata-app app
- Remove the vendored Blog API docs (config.yml entry + blog/) and its card

py-jwt/mcp/modules/jwtlib.models.security.json

@@ -1,39 +0,0 @@
-{
-  "module": "jwtlib.models.security",
-  "content": {
-    "path": "jwtlib.models.security",
-    "docstring": "# Summary\n\nJWT token payload models.\n\nThis module defines typed representations of decoded `JWT` payloads used\ninternally for token validation and user resolution.",
-    "objects": {
-      "BaseModel": {
-        "name": "BaseModel",
-        "kind": "alias",
-        "path": "jwtlib.models.security.BaseModel",
-        "signature": "<bound method Alias.signature of Alias('BaseModel', 'pydantic.BaseModel')>",
-        "docstring": null
-      },
-      "TokenPayload": {
-        "name": "TokenPayload",
-        "kind": "class",
-        "path": "jwtlib.models.security.TokenPayload",
-        "signature": "<bound method Class.signature of Class('TokenPayload', 13, 38)>",
-        "docstring": "Decoded `JWT` payload.\n\nAttributes:\n    sub (str):\n        Subject claim identifying the user (typically a username or user ID).\n    exp (int):\n        Expiration time as a Unix timestamp (seconds since epoch).\n\nNotes:\n    **Responsibilities:**\n\n        - Represents the validated claims extracted from a `JWT` after\n          signature verification. This model is used internally to enforce\n          required claims and provide a typed interface to token data.\n\n    **Guarantees:**\n\n        - This model assumes the `JWT` signature has already been verified.\n          No authorization decisions should be made solely on this model.\n          Additional claims may exist but are intentionally ignored.",
-        "members": {
-          "sub": {
-            "name": "sub",
-            "kind": "attribute",
-            "path": "jwtlib.models.security.TokenPayload.sub",
-            "signature": null,
-            "docstring": null
-          },
-          "exp": {
-            "name": "exp",
-            "kind": "attribute",
-            "path": "jwtlib.models.security.TokenPayload.exp",
-            "signature": null,
-            "docstring": null
-          }
-        }
-      }
-    }
-  }
-}