harden server, deduplicate CSS, fix layout and copy

- Parse templates once at startup instead of on every request

- Add security headers (X-Content-Type-Options, X-Frame-Options, etc.)

- Add per-request logging (IP, method, path, status, size, duration,

  referer, user-agent) — no PII in logs

- Add /healthz endpoint and graceful shutdown (SIGTERM)

- Validate waitlist emails and return proper errors on render failure

- Remove ~1700 lines of duplicate CSS appended to style.css

- Fix contribute grid (auto-fill → auto-fit for 3-card balance)

- Add accent color to contribute icons so SVGs are visible

- Center section headings, descriptions, waitlist form, and edition teaser

- Add Inter and JetBrains Mono Google Fonts

- Update hero and edition teaser copy to \"in development\"

- Add wget to Dockerfile for container healthcheck

- Point docker-compose healthcheck at /healthz

- Add .gitignore for build artifacts

Signed-off-by: Blake Ridgway <blake@blakeridgway.com>

templates/index.html

@@ -22,7 +22,6 @@
     <!-- Hero -->
     <section class="hero">
         <div class="hero-inner">
-            <div class="hero-kicker">arcline os — alpha</div>
             <h1>
                 The Linux OS for<br>
                 <span class="hero-highlight">people who run infrastructure.</span>
@@ -181,7 +180,7 @@
                 </div>
             </div>
             <div class="edition-teaser">
-                <div class="edition-teaser-badge">// also in the works</div>
+                <div class="edition-teaser-badge">// arcline workstation — in development</div>
                 <p>
                     <strong>Arcline Workstation</strong> — same hardened base, with a lightweight KDE Plasma desktop,
                     pre-configured dev toolchains, and privacy-hardened browser profiles.