feat: robust cache busting on deployment

[devin-ai-integration]

Summary

Vite already content-hashes JS/CSS chunks, but index.html can be cached by the browser or APISIX — causing users to load stale entry points that reference old chunk filenames. This PR adds 6 layers of cache busting to guarantee users always get fresh code on deploy:

Layer 1 — HTML <meta> tags (all 3 index.html)

<meta http-equiv="Cache-Control" content="no-cache, no-store, must-revalidate" />
<meta http-equiv="Pragma" content="no-cache" />
<meta http-equiv="Expires" content="0" />

Layer 2 — nginx configs (new for web2 + tenant_admin, updated for 54link_admin)

location = /index.html { add_header Cache-Control "no-cache, no-store, must-revalidate"; }
location /assets/       { expires 1y; add_header Cache-Control "public, immutable"; }
location = /sw.js       { add_header Cache-Control "no-cache, no-store, must-revalidate"; }

Layer 3 — APISIX response-rewrite plugin (3 web app routes)

Priority routing: /assets/* (p20, immutable) > /sw.js (p15, no-cache) > /* (p10, no-cache for HTML).

Layer 4 — Service worker version-based cache purge

CACHE_VERSION is stamped at build time by a Vite plugin. On activate, the SW deletes all caches not matching the current version and posts SW_UPDATED to all open tabs.

Layer 5 — Client-side SW registration

• updateViaCache: 'none' on register() — bypasses HTTP cache for sw.js
• 60s polling via registration.update()
• controllerchange auto-reloads the page
• Non-intrusive "new version available" banner with Reload/Later buttons

Layer 6 — Vite build config

Explicit assets/[name]-[hash].js output + swVersionStamp() plugin that writes a unique MD5 hash into dist/sw.js at closeBundle.

Also

• web2 and tenant_admin Dockerfiles upgraded from dev mode (npm run dev) to production builds (multi-stage → nginx).

Link to Devin session: https://app.devin.ai/sessions/07858e6781a543618f2cdd22ec11ac24
Requested by: @munisp

[devin-ai-integration]

Original prompt from Patrick

https://drive.google.com/file/d/1LE3Fw1DBgwl-3Aj7Bq3h-k7Xyo3tDt3i/view?usp=sharing
Extract ALL, analyze and refactor the core banking platform. Perform gap analysis and production readies. Identifty stubs, mocks, and placeholders

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring