only reveal a db record via /api/hits if it matches a real page

lib/config/constants.ts

@@ -1,9 +1,7 @@
 // Next.js constants (not needed in frontend)
 
-import path from "path";
-
 // directory containing .mdx files relative to project root
-export const NOTES_DIR = path.join(process.cwd(), "notes");
+export const NOTES_DIR = "notes";
 
 // normalize the timestamp saved when building/deploying (see next.config.js) and fall back to right now:
 export const RELEASE_DATE = new Date(process.env.RELEASE_DATE || Date.now()).toISOString();