chore: update _redirects to include new documentation paths and remove obsolete entries

Author: desimone

static/_redirects

@@ -136,8 +136,50 @@ https://docs.pomerium.io/* https://docs.pomerium.com/:splat 301!
 /_generate-recovery-token.html /docs/admonitions/_generate-recovery-token
 /_install-mkcert /docs/admonitions/_install-mkcert
 /_install-mkcert.html /docs/admonitions/_install-mkcert
-/docs/manage/custom-domains /docs/capabilities/custom-domains
-/docs/manage/custom-domains.html /docs/capabilities/custom-domains
+/docs/capabilities/certificates-and-tls /docs/internals/certificates-and-tls
+/docs/capabilities/certificates-and-tls.html /docs/internals/certificates-and-tls
+/docs/capabilities/device-identity /docs/integrations/device-context/device-identity
+/docs/capabilities/directory-sync /docs/integrations/user-standing/directory-sync
+/docs/capabilities/directory-sync.html /docs/integrations/user-standing/directory-sync
+/docs/capabilities/enterprise-api /docs/internals/management-api-enterprise
+/docs/capabilities/enterprise-api.html /docs/internals/management-api-enterprise
+/docs/capabilities/high-availability /docs/internals/configuration
+/docs/capabilities/high-availability.html /docs/internals/configuration
+/docs/capabilities/hosted-authenticate-service /docs/capabilities/authentication#hosted-authenticate-service
+/docs/capabilities/load-balancing /docs/capabilities/routing#load-balancer
+/docs/capabilities/metrics /docs/internals/metrics
+/docs/capabilities/metrics.html /docs/internals/metrics
+/docs/capabilities/mtls-clients /docs/internals/certificates-and-tls#downstream-tls
+/docs/capabilities/mtls-services /docs/internals/certificates-and-tls#upstream-tls
+/docs/capabilities/namespacing /docs/internals/namespacing
+/docs/capabilities/ppl /docs/internals/ppl
+/docs/capabilities/ppl.html /docs/internals/ppl
+/docs/capabilities/programmatic-access /docs/internals/programmatic-access
+/docs/capabilities/programmatic-access.html /docs/internals/programmatic-access
+/docs/capabilities/rego /docs/internals/ppl#rego
+/docs/capabilities/self-hosted-authenticate-service /docs/capabilities/authentication#self-hosted-authenticate-service
+/docs/capabilities/single-sign-out /docs/capabilities/authentication#single-sign-out-sso
+/docs/capabilities/tcp/client /docs/capabilities/non-http/client
+/docs/capabilities/tcp/examples/git /docs/capabilities/non-http/examples/git
+/docs/capabilities/tcp/examples/mysql /docs/capabilities/non-http/examples/mysql
+/docs/capabilities/tcp/examples/ssh /docs/capabilities/non-http/examples/ssh
+/docs/clients/pomerium-desktop /docs/deploy/clients
+/docs/community/security /docs/internals/security
+/docs/concepts/policies /docs/capabilities/authorization
+/docs/concepts/zero-trust /docs/internals/zero-trust
+/docs/core/from-source /docs/deploy/core
+/docs/core/upgrading /docs/deploy/upgrading
+/docs/courses/fundamentals/jwt-verification /docs/get-started/fundamentals/core/jwt-verification
+/docs/courses/fundamentals/self-hosted-pomerium /docs/get-started/fundamentals/core/self-hosted-pomerium
+/docs/deploy/cloud/api-guide /docs/internals/management-api-zero
+/docs/deploy/cloud/api-guide.html /docs/internals/management-api-zero
+/docs/deploy/enterprise/about/ /docs/deploy/enterprise
+/docs/deploy/enterprise/reference/configure.html /docs/deploy/enterprise/configure
+/docs/deploy/enterprise/upgrading.html /docs/deploy/upgrading
+/docs/deploying/k8s/quickstart /docs/deploy/k8s/quickstart
+/docs/enterprise/configure /docs/deploy/enterprise/configure
+/docs/enterprise/external-data/geoip /docs/integrations/request-context/geoip
+/docs/enterprise/external-data/ip-ranges /docs/integrations/request-context/ip-ranges
 /docs/get-started/fundamentals/advanced-policies /docs/get-started/fundamentals/core/advanced-policies
 /docs/get-started/fundamentals/advanced-policies.html /docs/get-started/fundamentals/core/advanced-policies
 /docs/get-started/fundamentals/advanced-routes /docs/get-started/fundamentals/core/advanced-routes
@@ -172,26 +214,32 @@ https://docs.pomerium.io/* https://docs.pomerium.com/:splat 301!
 /docs/get-started/fundamentals/zero-single-sign-on.html /docs/get-started/fundamentals/zero/zero-single-sign-on
 /docs/get-started/fundamentals/zero-tcp-routes /docs/get-started/fundamentals/zero/zero-tcp-routes
 /docs/get-started/fundamentals/zero-tcp-routes.html /docs/get-started/fundamentals/zero/zero-tcp-routes
-/docs/integrations/integrations /docs/capabilities/integrations
-/docs/integrations/integrations.html /docs/capabilities/integrations
-/docs/integrations/fleetdm /docs/integrations/device-context/fleetdm
-/docs/integrations/fleetdm.html /docs/integrations/device-context/fleetdm
-/docs/integrations/geoip /docs/integrations/request-context/geoip
-/docs/integrations/geoip.html /docs/integrations/request-context/geoip
-/docs/integrations/ip-ranges /docs/integrations/request-context/ip-ranges
-/docs/integrations/ip-ranges.html /docs/integrations/request-context/ip-ranges
-/docs/integrations/tor-exit-nodes /docs/integrations/request-context/tor-exit-nodes
-/docs/integrations/tor-exit-nodes.html /docs/integrations/request-context/tor-exit-nodes
-/docs/integrations/vpn-providers /docs/integrations/request-context/vpn-providers
-/docs/integrations/vpn-providers.html /docs/integrations/request-context/vpn-providers
+/docs/guides/jwt-verification-with-envoy /docs/capabilities/getting-users-identity
+/docs/guides/kubernetes.html /docs/deploy/k8s/quickstart
+/docs/guides/nginx https://0-20-0.docs.pomerium.com/docs/guides/nginx 301!
+/docs/guides/nginx.html https://0-20-0.docs.pomerium.com/docs/guides/nginx 301!
+/docs/guides/upstream-mtls.html /docs/capabilities/mtls-services
+/docs/identity-providers /docs/integrations/user-identity/identity-providers
+/docs/identity-providers/apple /docs/integrations/user-identity/apple
+/docs/identity-providers/auth0 /docs/integrations/user-identity/auth0
+/docs/identity-providers/azure /docs/integrations/user-identity/azure
+/docs/identity-providers/gitlab /docs/integrations/user-identity/gitlab
+/docs/identity-providers/gitlab.html /docs/integrations/user-identity/gitlab
+/docs/identity-providers/google /docs/integrations/user-identity/google
 /docs/integrations/apple /docs/integrations/user-identity/apple
 /docs/integrations/apple.html /docs/integrations/user-identity/apple
 /docs/integrations/auth0 /docs/integrations/user-identity/auth0
 /docs/integrations/auth0.html /docs/integrations/user-identity/auth0
 /docs/integrations/azure /docs/integrations/user-identity/azure
 /docs/integrations/azure.html /docs/integrations/user-identity/azure
+/docs/integrations/bamboohr /docs/integrations/user-standing/bamboohr
+/docs/integrations/bamboohr.html /docs/integrations/user-standing/bamboohr
 /docs/integrations/cognito /docs/integrations/user-identity/cognito
 /docs/integrations/cognito.html /docs/integrations/user-identity/cognito
+/docs/integrations/fleetdm /docs/integrations/device-context/fleetdm
+/docs/integrations/fleetdm.html /docs/integrations/device-context/fleetdm
+/docs/integrations/geoip /docs/integrations/request-context/geoip
+/docs/integrations/geoip.html /docs/integrations/request-context/geoip
 /docs/integrations/github /docs/integrations/user-identity/github
 /docs/integrations/github.html /docs/integrations/user-identity/github
 /docs/integrations/gitlab /docs/integrations/user-identity/gitlab
@@ -200,103 +248,48 @@ https://docs.pomerium.io/* https://docs.pomerium.com/:splat 301!
 /docs/integrations/google.html /docs/integrations/user-identity/google
 /docs/integrations/index /docs/integrations/user-identity/identity-providers
 /docs/integrations/index.html /docs/integrations/user-identity/identity-providers
+/docs/integrations/integrations /docs/capabilities/integrations
+/docs/integrations/integrations.html /docs/capabilities/integrations
+/docs/integrations/ip-ranges /docs/integrations/request-context/ip-ranges
+/docs/integrations/ip-ranges.html /docs/integrations/request-context/ip-ranges
 /docs/integrations/okta /docs/integrations/user-identity/okta
 /docs/integrations/okta.html /docs/integrations/user-identity/okta
 /docs/integrations/one-login /docs/integrations/user-identity/one-login
 /docs/integrations/one-login.html /docs/integrations/user-identity/one-login
 /docs/integrations/ping /docs/integrations/user-identity/ping
 /docs/integrations/ping.html /docs/integrations/user-identity/ping
-/docs/integrations/bamboohr /docs/integrations/user-standing/bamboohr
-/docs/integrations/bamboohr.html /docs/integrations/user-standing/bamboohr
-/docs/capabilities/directory-sync /docs/integrations/user-standing/directory-sync
-/docs/capabilities/directory-sync.html /docs/integrations/user-standing/directory-sync
+/docs/integrations/tor-exit-nodes /docs/integrations/request-context/tor-exit-nodes
+/docs/integrations/tor-exit-nodes.html /docs/integrations/request-context/tor-exit-nodes
+/docs/integrations/vpn-providers /docs/integrations/request-context/vpn-providers
+/docs/integrations/vpn-providers.html /docs/integrations/request-context/vpn-providers
 /docs/integrations/zenefits /docs/integrations/user-standing/zenefits
 /docs/integrations/zenefits.html /docs/integrations/user-standing/zenefits
-/docs/capabilities/certificates-and-tls /docs/internals/certificates-and-tls
-/docs/capabilities/certificates-and-tls.html /docs/internals/certificates-and-tls
+/docs/k8s/helm.html /docs/deploy/k8s/install
+/docs/k8s/ingress.html /docs/deploy/k8s/ingress
+/docs/k8s/quickstart /docs/deploy/k8s/quickstart
 /docs/manage/clusters /docs/internals/clusters
 /docs/manage/clusters.html /docs/internals/clusters
-/docs/capabilities/high-availability /docs/internals/configuration
-/docs/capabilities/high-availability.html /docs/internals/configuration
-/docs/capabilities/enterprise-api /docs/internals/management-api-enterprise
-/docs/capabilities/enterprise-api.html /docs/internals/management-api-enterprise
-/docs/deploy/cloud/api-guide /docs/internals/management-api-zero
-/docs/deploy/cloud/api-guide.html /docs/internals/management-api-zero
+/docs/manage/custom-domains /docs/capabilities/custom-domains
+/docs/manage/custom-domains.html /docs/capabilities/custom-domains
 /docs/manage/mutual-auth /docs/internals/mutual-auth
 /docs/manage/mutual-auth.html /docs/internals/mutual-auth
-/docs/capabilities/metrics /docs/internals/metrics
-/docs/capabilities/metrics.html /docs/internals/metrics
-/docs/capabilities/ppl /docs/internals/ppl
-/docs/capabilities/ppl.html /docs/internals/ppl
-/docs/capabilities/programmatic-access /docs/internals/programmatic-access
-/docs/capabilities/programmatic-access.html /docs/internals/programmatic-access
 /docs/manage/troubleshooting /docs/internals/troubleshooting
 /docs/manage/troubleshooting.html /docs/internals/troubleshooting
-
-# Additional old capabilities => new locations
-/docs/capabilities/rego /docs/internals/ppl#rego
-/docs/capabilities/namespacing /docs/internals/namespacing
-/docs/capabilities/load-balancing /docs/capabilities/routing#load-balancer
-/docs/capabilities/device-identity /docs/integrations/device-context/device-identity
-/docs/capabilities/single-sign-out /docs/capabilities/authentication#single-sign-out-sso
-/docs/capabilities/mtls-clients /docs/internals/certificates-and-tls#downstream-tls
-/docs/capabilities/mtls-services /docs/internals/certificates-and-tls#upstream-tls
-/docs/capabilities/hosted-authenticate-service /docs/capabilities/authentication#hosted-authenticate-service
-/docs/capabilities/self-hosted-authenticate-service /docs/capabilities/authentication#self-hosted-authenticate-service
-
-##################################################
-# NEW ADDITIONAL 404S => Real doc pages (from logs)
-##################################################
-
-/docs/core/upgrading /docs/deploy/upgrading
-/docs/topics/mutual-auth.html /docs/internals/mutual-auth
-/docs/identity-providers/gitlab /docs/integrations/user-identity/gitlab
-/docs/identity-providers/gitlab.html /docs/integrations/user-identity/gitlab
-/docs/deploy/enterprise/reference/configure.html /docs/deploy/enterprise/configure
-/docs/concepts/zero-trust /docs/internals/zero-trust
-/docs/enterprise/external-data/geoip /docs/integrations/request-context/geoip
-/docs/zero/import /docs/deploy/cloud/import
-/docs/identity-providers/azure /docs/integrations/user-identity/azure
-/docs/concepts/policies /docs/internals/glossary#policy
-/docs/zero/billing /docs/deploy/cloud/billing
-/docs/enterprise/external-data/ip-ranges /docs/integrations/request-context/ip-ranges
-/docs/k8s/ingress.html /docs/deploy/k8s/ingress
-/docs/capabilities/tcp/examples/mysql /docs/capabilities/non-http/examples/mysql
-/recipes/ad-guard /docs/guides/ad-guard
-/docs/community/security /docs/internals/security
-/docs/k8s/helm.html /docs/deploy/k8s/install
-/docs/reference/branding/logo-url /docs/reference/branding#logo-url
-/docs/guides/nginx https://0-20-0.docs.pomerium.com/docs/guides/nginx 301!
-/docs/guides/nginx.html https://0-20-0.docs.pomerium.com/docs/guides/nginx 301!
-/docs/capabilities/tcp/examples/ssh /docs/capabilities/non-http/examples/ssh
-/docs/topics/device-identity.html /docs/integrations/device-context/device-identity
-/docs/courses/fundamentals/jwt-verification /docs/get-started/fundamentals/core/jwt-verification
-/docs/capabilities/tcp/examples/git /docs/capabilities/non-http/examples/git
 /docs/reference/authenticate-internal-service-url /docs/reference/service-urls
-/docs/identity-providers/auth0 /docs/integrations/user-identity/auth0
-/docs/k8s/quickstart /docs/deploy/k8s/quickstart
+/docs/reference/autocert/autocert-must-staple /docs/reference/autocert#autocert-must-staple
+/docs/reference/branding/logo-url /docs/reference/branding#logo-url
 /docs/reference/cookie-secure /docs/reference/cookies#cookie-secure
-/docs/identity-providers /docs/integrations/user-identity/identity-providers
-/docs/reference/reference.html /docs/reference
-/docs/deploying/k8s/quickstart /docs/deploy/k8s/quickstart
-/docs/enterprise/configure /docs/deploy/enterprise/configure
-/docs/deploy/enterprise/upgrading.html /docs/deploy/upgrading
+/docs/reference/forward-auth https://0-20-0.docs.pomerium.com/docs/reference/forward-auth 301!
 /docs/reference/metrics-basic-authentication /docs/deploy/enterprise/configure-metrics
-/docs/reference/autocert/autocert-must-staple /docs/reference/autocert#autocert-must-staple
-/docs/guides/kubernetes.html /docs/deploy/k8s/quickstart
-/docs/troubleshooting /docs/internals/troubleshooting
+/docs/reference/reference.html /docs/reference
 /docs/releases/pomerium-cli /docs/deploy/clients
-/docs/identity-providers/google /docs/integrations/user-identity/google
+/docs/topics/device-identity.html /docs/integrations/device-context/device-identity
+/docs/topics/mutual-auth.html /docs/internals/mutual-auth
+/docs/topics/original-request-context /docs/capabilities/original-request-context
 /docs/topics/ppl /docs/internals/ppl
-/docs/guides/jwt-verification-with-envoy /docs/capabilities/getting-users-identity
-/docs/clients/pomerium-desktop /docs/deploy/clients
-/docs/deploy/enterprise/about/ /docs/deploy/enterprise
 /docs/topics/production-deployment.html /docs/deploy/upgrading
-/docs/identity-providers/apple /docs/integrations/user-identity/apple
 /docs/topics/programmatic-access.html /docs/internals/programmatic-access
-/docs/reference/forward-auth https://0-20-0.docs.pomerium.com/docs/reference/forward-auth 301!
-/docs/courses/fundamentals/self-hosted-pomerium /docs/get-started/fundamentals/core/self-hosted-pomerium
-/docs/guides/upstream-mtls.html /docs/capabilities/mtls-services
-/docs/topics/original-request-context /docs/capabilities/original-request-context
-/docs/capabilities/tcp/client /docs/capabilities/non-http/client
-/docs/core/from-source /docs/deploy/core
+/docs/troubleshooting /docs/internals/troubleshooting
+/docs/zero/billing /docs/deploy/cloud/billing
+/docs/zero/import /docs/deploy/cloud/import
+/recipes/ad-guard /docs/guides/ad-guard