add README — host roles + deploy + DNS gotchas