chore(devops): patient web app in docker compose — the jury needs only Docker

Requirement: no extra software beyond the regulated set. The web app is built in a Node stage and served by
nginx (:8080, /api → app, SSE unbuffered); the server override keeps it off (host nginx serves the bundle).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docker-compose.yml

@@ -47,5 +47,14 @@ services:
     ports:
       - "8501:8501"
 
+  web:
+    # Patient web app (React) — built inside Docker, no Node needed on the host.
+    build: ./web
+    depends_on:
+      app:
+        condition: service_healthy
+    ports:
+      - "8080:80"
+
 volumes:
   pgdata: