Initial scaffold: tablet-checkin app

Staff-push guest check-in tablet. Fastify backend + React/Vite frontend,
three-tier auth (staff JWT, terminal API key, kiosk cookie), NewBook
integration via bookings_get/guests_update/bookings_update, pdfkit-based
regcard generation, marketing opt-in with Sendy/Mailchimp adapters.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

frontend/nginx.conf

@@ -0,0 +1,53 @@
+server {
+    listen 80;
+    server_name localhost;
+    root /usr/share/nginx/html;
+    client_max_body_size 12m;
+
+    location /tablet-checkin/api/auth/ {
+        proxy_pass http://10.10.10.101:3001/api/auth/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+
+    # SSE (devices/:id/stream) needs buffering off and no timeout — otherwise
+    # nginx buffers the event-stream response and the tablet's idle page
+    # never actually receives a push in real time.
+    location /tablet-checkin/api/devices/ {
+        proxy_pass http://backend:3001/api/devices/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_buffering off;
+        proxy_read_timeout 3600s;
+        add_header Cache-Control "no-store";
+    }
+
+    location /tablet-checkin/api/ {
+        proxy_pass http://backend:3001/api/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        add_header Cache-Control "no-store";
+    }
+
+    location /tablet-checkin/health {
+        proxy_pass http://backend:3001/health;
+    }
+
+    location ~* /tablet-checkin/.*\.(js|css|png|ico|svg|woff2?)$ {
+        expires 1y;
+        add_header Cache-Control "public, immutable";
+        try_files $uri =404;
+    }
+
+    location /tablet-checkin/ {
+        add_header Cache-Control "no-cache" always;
+        try_files $uri /tablet-checkin/index.html;
+    }
+
+    location = / {
+        return 301 /tablet-checkin/;
+    }
+}