Document site-local input guidance

[yoshifuminakamura]

Summary

• document how app maintainers should handle pre-staged inputs and site-local paths
• clarify that project/allocation IDs are not blanket secrets, but should be kept to the minimum needed in the public repo
• recommend dataset identity, recipes, manifests, and digests for pre-staged input provenance

Tests

• git diff --check