fix: complete review hardening

apps/docs/docs/management/api/index.mdx

@@ -144,8 +144,9 @@ Docker or Podman endpoints from targeting the wrong service.
 Docker environment, or pass one or more IDs returned by `docker.getEndpoints` to query only those Dockerode clients. The
 Docker widget uses the same behavior for its environment selector.
 
-`docker.refreshInventory` always refreshes the current replica and returns `scope: "all"` after cross-replica publication or
-`scope: "local"` when Redis is unavailable. A local result is partial success: retry after restoring Redis to refresh every replica.
+`docker.refreshInventory` always refreshes the current replica and returns `scope: "published"` when Redis accepts the
+non-persistent refresh event, or `scope: "local"` when publication fails. Published scope does not confirm that every replica
+processed the event. A local result is partial success: retry after restoring Redis to notify the other replicas.
 
 ## Partial integration failures
 

apps/docs/docs/widgets/iframe/index.mdx

@@ -66,6 +66,8 @@ add_header Content-Security-Policy "frame-ancestors 'self' https://trusted-domai
 
 - **Wikipedia homepage:** https://en.wikipedia.org/wiki/Main_Page
 - **Any YouTube video or stream:** https://www.youtube.com/embed/dQw4w9WgXcQ?si=MWUbbG66UNTla_Ni
+- **Same-origin page:** `/path/to/page` resolves from the current Homarr origin. Root-relative URLs are useful when Homarr and
+  the embedded page share a reverse-proxy host.
 
 ### Configuration