Add local PS5 guide DNS gateway

AGENTS.md

@@ -21,6 +21,7 @@ before including them in an image.
 - `Dockerfile`: runtime image and payload-integrity checks.
 - `compose.yaml`: hardened local deployment.
 - `docker/server.py`: static HTTP server and security headers.
+- `docker/guide_gateway.py`: restricted DNS plus HTTP/HTTPS User Guide redirect.
 - `payloads.sha256`: approved payload digests for the pinned submodule commit.
 - `docs/PS5_SETUP.md`: user and operator guide.
 - `docs/HANDOFF.md`: current infrastructure state and durable session handoff.
@@ -69,6 +70,9 @@ Then perform a disposable smoke test and verify:
 - `/.git/config` returns 404;
 - the process runs as UID/GID `65532:65532`;
 - the configured security headers remain present.
+- `manuals.playstation.net` resolves to the configured gateway address;
+- unrelated DNS names return NXDOMAIN;
+- HTTP and HTTPS User Guide requests redirect to the local exploit URL.
 
 Do not leave smoke-test containers running.