Import march-2020-03-10 from private repo (scrubbed 2026-05-27)

Targets Rec Room 2020.03.10 client (also serves 2020.03.06).

Re-import after adding:
- DorkNet.ClientMod/dorknet-clientmod.json.template — config schema
  the launcher's manifest-driven patcher renders into UserData/.
- tools/build-patcher-zip.ps1 — produces dorknet-clientpatch-{key}.zip
  for v1-march-* Release uploads.
- .github/workflows/release.yml — on tag push publishes both
  dorknet-server-march_2020_03_10-win-x64.zip and
  dorknet-clientpatch-march_2020_03_10.zip as Release assets.

Same scrub rules as december; tools/build-patcher-zip.ps1 added to
the maintainer-side allow-list so it survives.

DorkNet.Server/site/vite.config.ts

@@ -0,0 +1,34 @@
+import { defineConfig } from 'vite';
+import react from '@vitejs/plugin-react';
+import path from 'node:path';
+
+// Public-facing site. Source lives at DorkNet.Server/site; build emits
+// straight into DorkNet.Server/wwwroot/site so the static file
+// middleware picks it up at the apex localhost / rec.net hosts without
+// any extra publish wiring.
+export default defineConfig({
+  plugins: [react()],
+  base: '/',
+  resolve: {
+    alias: { '@': path.resolve(__dirname, 'src') },
+  },
+  build: {
+    outDir: path.resolve(__dirname, '../wwwroot/site'),
+    emptyOutDir: true,
+    target: 'es2022',
+    sourcemap: true,
+  },
+  server: {
+    port: 5174,
+    proxy: {
+      // Dev convenience: `npm run dev` proxies API calls to the
+      // running ASP.NET server so we can iterate on the SPA with HMR
+      // without dealing with CORS.
+      '/api': {
+        target: 'http://localhost:80',
+        changeOrigin: true,
+        secure: false,
+      },
+    },
+  },
+});