Prefer page-bound website during bootstrap

[cbusillo]

Summary

• select the primary page's bound website before falling back to canonical-domain lookup during website bootstrap
• clear stale duplicate canonical domains from other website records before assigning the target domain
• fail before any writes when a required primary page XMLID is missing
• strengthen bootstrap tests for page-bound selection, duplicate-domain clearing, and fail-before-write behavior

Plan Alignment

This advances the Odoo fixture-readiness work. Launchplane now proves the cm website bootstrap payload is complete, but public Odoo still rendered the default My Website/localhost identity. The likely runtime gap is that bootstrap could update a different website record than the tenant page/public request used. This patch makes the page-bound website the identity target.

Validation

• uv run python -m unittest tests.test_odoo_website_bootstrap tests.test_odoo_data_workflows
• uv run python -m unittest discover -s tests
• uv run ruff format --check docker/scripts/odoo_website_bootstrap.py tests/test_odoo_website_bootstrap.py
• uv run ruff check docker/scripts/odoo_website_bootstrap.py tests/test_odoo_website_bootstrap.py

Review

• First read-only review found duplicate-domain and fail-before-write test gaps; both were fixed.
• Second read-only review found only coverage weaknesses; tests were strengthened and full suite rerun.