fix: copy frontend/public into Docker image and set WS origin

The Dockerfile only copied frontend/dist (built assets) but not
frontend/public/ (static files). This caused /static/game-redirect.js
to 404 since the lobby app silently skips mounting /static when the
directory is missing.

Also adds LOBBY_WS_ALLOWED_ORIGIN so WebSocket origin checks pass
in production.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Nihisil

deploy/Dockerfile

@@ -92,6 +92,8 @@ COPY backend/ backend/
 # Copy built frontend assets from the frontend-builder stage.
 # All production assets (game client + lobby CSS) are content-hashed in dist/.
 COPY --from=frontend-builder /app/frontend/dist /app/frontend/dist
+# Static files served at /static (game-redirect.js, env.js, logo, etc.)
+COPY frontend/public /app/frontend/public
 
 # Create directories for runtime data
 RUN mkdir -p /app/data/logs /app/data/replays /app/data/db && \

deploy/docker-compose.yml

@@ -40,6 +40,7 @@ services:
       LOBBY_GAME_ASSETS_DIR: /app/frontend/dist
       LOBBY_GAME_CLIENT_URL: /game
       LOBBY_ALLOWED_HOSTS: %%DOMAIN%%,localhost
+      LOBBY_WS_ALLOWED_ORIGIN: https://%%DOMAIN%%
       LOBBY_LOG_DIR: /app/data/logs/lobby
       LOG_FORMAT: json
       LOG_LEVEL: ${LOG_LEVEL:-info}