docs: README, OrbStack notes, autoload fallback for deploys without composer

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

public/.htaccess

@@ -0,0 +1,11 @@
+# Alleen relevant als de productieserver AllowOverride toestaat. De vhost-config heeft voorrang.
+<IfModule mod_headers.c>
+    Header set X-Robots-Tag "noindex, nofollow"
+    <FilesMatch "\.(html|js|css|webmanifest)$">
+        Header set Cache-Control "no-cache"
+    </FilesMatch>
+</IfModule>
+<IfModule mod_mime.c>
+    AddType application/manifest+json .webmanifest
+</IfModule>
+Options -Indexes

public/api/data.php

@@ -14,7 +14,7 @@ header('Content-Type: application/json; charset=utf-8');
 header('Cache-Control: no-store');
 header('X-Robots-Tag: noindex');
 
-require $root . '/vendor/autoload.php';
+require $root . '/src/autoload.php';
 
 $configFile = $root . '/config.php';
 if (!is_file($configFile)) {