Deploy worker.js as an ES-module Cloudflare Worker. Define WEBHOOK_SECRET as a secret binding. Configure Telegram setWebhook for /telegram with that secret. Token must be provided only to Telegram management API, never embedded in source. Handler responds to private /start, /help and /catalog through a Telegram webhook response. No database and no message logging are used.
