harden server, deduplicate CSS, fix layout and copy

- Parse templates once at startup instead of on every request

- Add security headers (X-Content-Type-Options, X-Frame-Options, etc.)

- Add per-request logging (IP, method, path, status, size, duration,

  referer, user-agent) — no PII in logs

- Add /healthz endpoint and graceful shutdown (SIGTERM)

- Validate waitlist emails and return proper errors on render failure

- Remove ~1700 lines of duplicate CSS appended to style.css

- Fix contribute grid (auto-fill → auto-fit for 3-card balance)

- Add accent color to contribute icons so SVGs are visible

- Center section headings, descriptions, waitlist form, and edition teaser

- Add Inter and JetBrains Mono Google Fonts

- Update hero and edition teaser copy to \"in development\"

- Add wget to Dockerfile for container healthcheck

- Point docker-compose healthcheck at /healthz

- Add .gitignore for build artifacts

Signed-off-by: Blake Ridgway <blake@blakeridgway.com>

templates/base.html

@@ -6,6 +6,9 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>{{.Title}}</title>
     <link rel="icon" type="image/svg+xml" href="/static/favicon.svg">
+    <link rel="preconnect" href="https://fonts.googleapis.com">
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,400..700&amp;family=JetBrains+Mono:ital,wght@0,400..700;1,400..700&amp;display=swap" rel="stylesheet">
     <link rel="stylesheet" href="/static/css/style.css">
     <script src="/static/js/htmx.min.js"></script>
 </head>

templates/index.html

@@ -22,7 +22,6 @@
     <!-- Hero -->
     <section class="hero">
         <div class="hero-inner">
-            <div class="hero-kicker">arcline os — alpha</div>
             <h1>
                 The Linux OS for<br>
                 <span class="hero-highlight">people who run infrastructure.</span>
@@ -181,7 +180,7 @@
                 </div>
             </div>
             <div class="edition-teaser">
-                <div class="edition-teaser-badge">// also in the works</div>
+                <div class="edition-teaser-badge">// arcline workstation — in development</div>
                 <p>
                     <strong>Arcline Workstation</strong> — same hardened base, with a lightweight KDE Plasma desktop,
                     pre-configured dev toolchains, and privacy-hardened browser profiles.