Small, hardened nginx image for hosting static sites (Astro, Hugo, plain HTML) from /app.