feat: deployment setup - nginx, Caddy configs, deploy script, API smoke tests

setup/caddy-edu.txt

@@ -0,0 +1,11 @@
+# Append to /opt/caddy/Caddyfile on the Pi
+
+edu.senex.de {
+    reverse_proxy webapps:8080
+    header {
+        X-Frame-Options "DENY"
+        X-Content-Type-Options "nosniff"
+        Strict-Transport-Security "max-age=31536000; includeSubDomains"
+        Referrer-Policy "strict-origin-when-cross-origin"
+    }
+}