Adds a puzzle-relay service (docker-compose.yml) running the same
image as php but executing app:puzzle-relay instead of php-fpm, kept
off the host network - only nginx can reach it. nginx proxies
wss://dmtools.fvandenberg.nl/puzzle-ws/ through to it
(docker/nginx/default.conf), with the public URL set via a new
.env.prod. setup.sh/restart.sh now rebuild, restart, and clean up the
new container alongside the existing ones.
Still needs "Websockets Support" enabled on the NPM proxy host for
this domain, or the upgrade headers never reach the container.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
