fix: build and permissions

deploy/nginx/default.conf

@@ -5,10 +5,8 @@ server {
     root /var/www/html/public;
     index index.php;
 
-    # Health check (no PHP)
     location = /healthz { return 200 "ok\n"; add_header Content-Type text/plain; }
 
-    # Static assets
     location ~* \.(?:css|js|mjs|map|jpg|jpeg|png|gif|ico|svg|webp|avif|ttf|otf|woff|woff2)$ {
         access_log off; log_not_found off;
         expires 7d;
@@ -16,12 +14,10 @@ server {
         try_files $uri =404;
     }
 
-    # Laravel front controller
     location / {
         try_files $uri $uri/ /index.php?$query_string;
     }
 
-    # PHP via unix socket (shared with php-fpm)
     location ~ \.php$ {
         include        fastcgi_params;
         fastcgi_index  index.php;