Kestrove website: home page with downloads, support and privacy pages

Co-Authored-By: Claude Opus 5.5 <[email protected]>

deploy/Caddyfile.snippet

@@ -0,0 +1,16 @@
+# The Kestrove website: static files only. Replace DOMAIN and the root path.
+DOMAIN {
+	encode zstd gzip
+	root * /srv/kestrove-website
+	header {
+		Strict-Transport-Security "max-age=63072000"
+		X-Content-Type-Options nosniff
+		Referrer-Policy strict-origin-when-cross-origin
+		Content-Security-Policy "default-src 'self'; img-src 'self'; style-src 'self'; script-src 'self'; font-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'"
+		X-Frame-Options DENY
+		-Server
+	}
+	@assets path /assets/*
+	header @assets Cache-Control "public, max-age=604800"
+	file_server
+}