Harden CI and switch release builds to tagged immutable images

web/vite.config.ts

@@ -0,0 +1,17 @@
+import { defineConfig } from "vite";
+import react from "@vitejs/plugin-react";
+
+export default defineConfig({
+  plugins: [react()],
+  server: {
+    port: 5173,
+    proxy: {
+      "/api": "http://localhost:8080",
+      "/health": "http://localhost:8080"
+    }
+  },
+  build: {
+    sourcemap: true
+  }
+});
+