Consolidate Docker deployment into a single PaperJet container

frontend/nginx.conf

@@ -2,10 +2,12 @@ server {
     listen 80;
     server_name _;
 
+    access_log /dev/stdout;
+    error_log /dev/stderr warn;
+
     include /etc/nginx/mime.types;
     types {
         application/javascript mjs;
-        application/wasm wasm;
     }
 
     # Match MAX_UPLOAD_MB — raise in both this and the outer reverse proxy
@@ -25,9 +27,9 @@ server {
         try_files $uri $uri/ /index.html;
     }
 
-    # Proxy /api/ to the backend container
+    # Proxy /api/ to the loopback-only FastAPI process in this container
     location /api/ {
-        proxy_pass http://backend:8000;
+        proxy_pass http://127.0.0.1:8000;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;