stacks/news-digest: twice-daily LLM-curated briefing on ana-docker

The Miniflux inbox got noisy after a few subreddits + HN + Lobste.rs.
This stack distills a single static page twice a day — at 0800 and
2000 local — that surfaces only what cleared score + ratio filters,
each item tldr'd by qwen3.5-35-a3b on llama-swap.

Pipeline (digest.py, ~330 lines):
  1. Discover subreddits from Miniflux feeds (any reddit.com/r/<sub>/
     URL — single source of truth, no duplicated config).
  2. Reddit JSON top-of-day per sub. Filter: score >= 50,
     upvote_ratio >= 0.85. Cap 8 items per sub.
  3. Miniflux /v1/entries for the 'Tech aggregators' category
     (HN, Lobste.rs) — last 12 hours.
  4. Batched per-source summarization via llama-swap
     /v1/chat/completions. Each post gets a one-sentence tldr +
     one-word tag (news / tutorial / release / discussion /
     question / showcase / drama / meme).
  5. Render Jinja2 template. Atomic write to /output/index.html
     (.tmp + rename) so partial pages never get served. Per-edition
     archive at /output/edition-YYYY-MM-DD-{am,pm}.html.

Two containers:
  news-digest-worker  python:3.12-alpine + busybox crond
  news-digest-web     nginx:alpine, port 8181, homepage card via
                      docker labels (group=News, fits next to Miniflux)

Both bind-mount /opt/docker/data/news-digest as /output and
/usr/share/nginx/html respectively.

Aesthetic — operations-center chrome (Australis cool-mono palette,
JetBrains Mono UPPERCASE eyebrows, mdi-glyph anchor) wrapping
editorial-serif news content (Fraunces variable serif w/ optical
sizes). Two type families that wouldn't normally meet, intentionally
combined: chrome says 'filed at 0800 from the bridge'; headlines say
'this is news, read it like news.' Sticky aurora-glow rule under the
masthead is the only sanctioned Australis gradient.

Edition stamp (AM/PM in big mono Australis-yellow) is the signature
piece — establishes the twice-daily rhythm at a glance.

All filtering + LLM + scheduling knobs in .env. Subreddit list is
implicit (read from Miniflux), so adding a sub = subscribing in
Miniflux, no config edit on this stack.

stacks/news-digest/entrypoint.sh

@@ -0,0 +1,26 @@
+#!/usr/bin/env bash
+# entrypoint.sh — news-digest worker startup.
+#
+# Strategy:
+#   1. If /output is empty, run digest.py once at start so the page
+#      isn't blank while waiting for the next cron tick.
+#   2. Start busybox crond in foreground so the container stays up.
+#
+# All env vars are inherited from compose, including TZ which busybox
+# crond honors when computing fire times.
+
+set -e
+
+mkdir -p /output
+
+if [ ! -f /output/index.html ]; then
+    echo "[entrypoint] no /output/index.html yet — running first digest"
+    /usr/local/bin/run-digest.sh || \
+        echo "[entrypoint] first run failed; cron will retry on schedule"
+fi
+
+# Tee crontab into the place busybox expects (already done in image
+# via COPY) and run crond in foreground. -L /dev/stdout sends cron
+# stdout/stderr to docker logs.
+echo "[entrypoint] starting crond (fires per /etc/crontabs/root)"
+exec crond -f -L /dev/stdout -l 8