Serve the static site from a non-root nginx image listening on 8080,
with cache headers, gzip and a /healthz endpoint. Designed to run behind
an external reverse proxy that terminates TLS.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>