feat(phasefinal-web): corporate site stack on ana-docker

Single static page (nginx) fronted by Traefik at www.phasefinal.com, built
from the design brief. Site markup/CSS checked in verbatim from the design
session; fonts self-hosted (SIL OFL) with the @font-face block uncommented,
which every fresh export re-comments.

Routed via a Traefik file-provider config rather than the container labels:
the docker provider on ana-docker was not registering newly-created
containers, so the file router avoids restarting shared ingress. Labels are
retained in compose so the file can be dropped once that is fixed.

stacks/phasefinal-web/compose.yaml

@@ -0,0 +1,26 @@
+services:
+  web:
+    image: nginx:alpine
+    container_name: phasefinal-web
+    restart: unless-stopped
+    volumes:
+      - /opt/docker/conf/phasefinal-web/site:/usr/share/nginx/html:ro
+      - /opt/docker/conf/phasefinal-web/nginx.conf:/etc/nginx/conf.d/default.conf:ro
+    networks:
+      - tnet
+    healthcheck:
+      test: ["CMD", "wget", "-qO-", "http://localhost/"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+    labels:
+      - traefik.enable=true
+      - traefik.http.routers.phasefinal-web.rule=Host(`www.phasefinal.com`)
+      - traefik.http.routers.phasefinal-web.tls=true
+      - traefik.http.routers.phasefinal-web.tls.certresolver=anaprod
+      - traefik.http.services.phasefinal-web.loadbalancer.server.port=80
+
+networks:
+  tnet:
+    name: traefik-net
+    external: true