After a lot of messing around (turns out it was cached,…), I am now getting:
{"error":"Forbidden","code":"SITE_MISSING"}
Similar to @ppittman in his thread
Despite CORS not being an issue anymore, I do still encounter:
[2025-08-14 21:57:56] ERROR Could not get webhook secret for ActivityPub FetchError: invalid json response body at https://mywebsite.com/.ghost/activitypub/v1/site reason: Unexpected token '<', "<!DOCTYPE "... is not valid JSON
[2025-08-14 21:57:56] ERROR No webhook secret found - cannot initialise