[szweibel]

Summary

• revalidate frontend HTML and non-hashed root assets while caching Vite hashed assets immutably
• avoid anonymous session cookies on static frontend assets
• actively verify authenticated remote Docling health with bounded, sanitized failure reporting
• exercise the built frontend through Chromium in the container CI smoke test

Verification

• 532 backend tests passed
• frontend ESLint, TypeScript, and Vite production build passed
• Ruff and git diff --check passed
• production-shaped local container passed the browser runtime smoke check
• cache headers verified on the running container
• independent release review found no blockers