feat: LAD A-Team CIS Compliance Report, React SPA, i18n, report management, explorer UX fixes

- Professional Oracle-format compliance report with RAG remediation from ADB vector store
- React 19 SPA at /app/ (16 pages, TypeScript, Vite, Zustand, i18n pt/en 625 keys)
- Report delete endpoint, embed individual report files into vector store
- Terraform ZIP download (client-side, pure JS)
- Explorer silent polling during start/stop (no flickering)
- HTML report and compliance report sections start minimized
- Token auth fix for compliance report CSV download links

nginx/default.conf

@@ -3,7 +3,17 @@ server {
     server_name _;
 
     client_max_body_size 50M;
+    absolute_redirect off;
 
+    # New React app at /app/
+    location ^~ /app/ {
+        root /usr/share/nginx/html;
+        # Files are in /usr/share/nginx/html/app/ (mapped from dist/)
+        try_files $uri $uri/ /app/index.html;
+        add_header Cache-Control "no-cache, no-store, must-revalidate";
+    }
+
+    # Legacy SPA at /
     location / {
         root /usr/share/nginx/html;
         index index.html;
@@ -11,6 +21,7 @@ server {
         add_header Cache-Control "no-cache, no-store, must-revalidate";
     }
 
+    # Backend API proxy
     location /api/ {
         proxy_pass http://backend:8000/api/;
         proxy_set_header Host $host;