[Task]: Hide access to development site

[acouch]

Summary

The development site does not have any sensitive information or artifacts as all of the code and the workflow to generate it is public. We want the dev site to be accessible to non-technical reviewers. However, we do not want the development site to be indexed, linked to, or confused by the general public as the production site. It is OK for the password or URL to be in code or even in the documentation.

This could be implemented by:

• feature flags
• htpasswd
• AWS auth mechanism

Acceptance criteria

• development site hidden
• documentation updated