Container build en preview deployment via ZAD

[robbertbos]

Summary

• Multi-stage Containerfile: MkDocs build + nginx-unprivileged met security headers (CSP, HSTS, etc.)
• Preview workflow: bouwt container en deployt naar ZAD op PRs en push naar main
• Production workflow: bouwt container en deployt naar ZAD op version tags (v*)
• Material Insiders dependency verwijderd (nu gratis in publieke repo)
• getBasePath() in modal.js gebruikt nu MkDocs <base> element i.p.v. hardcoded paden

Sluit #837

Test plan

• Lokaal bouwen: docker build -t algoritmekader -f Containerfile .
• Lokaal draaien: docker run -p 8080:8080 algoritmekader → http://localhost:8080
• Beslishulp AI-verordening openen vanuit modal
• Preview deployment controleren via ZAD comment op PR
• Production deployment testen via tag push

[github-actions]

🚀 Preview Deployment

Your changes have been deployed to a preview environment:

URL: https://component-2-pr844-algor-1ha.rig.prd1.gn2.quattro.rijksapps.nl/kader/

📱 Scan to open on mobile

 ▄▄▄▄▄ █▀█▀▄  █▀ █▀▄█▀▀▄██ ▄▄▄▄▄ 
 █   █ █▀ ▄▄▄▀▀▄█▀▀█▄▄▀█ █ █   █ 
 █▄▄▄█ █▀█▀▄█ █▀▄ ▄▄▄▄▀▄██ █▄▄▄█ 
▄▄▄▄▄▄▄█▄█▄█▄█ █▄█ ▀▄▀ █▄█▄▄▄▄▄▄▄
   ▄ █▄▄  ▄▀▄▄ ▄ ▄▀▀ █▄  ▄▀▄█▄▀ ▀
██▄▄▀ ▄█▀ ▀█▄▄▀▄▀▄███▀ █▄▄ ██▄▀▄█
▀█ ▄▄▀▄ █▄▀▀▄▄▄██ ▀▀ ▀ ▀▀ ▀▄▄▄█▀▀
 ██▀▄▀▄█▄ ▄█▀█▀▄ ▄▀▀▀▀██▄▄█▄ █▀▄█
▄▄█▀██▄▀▄█ ▀▄▄ █▀▄▄ ███▀▀█▀▄▄▀█ ▀
█▄▀  ▀▄▄▄▀█▀▀██▄█▄ ▀   █  ▄█ ▄▀▄█
▀▀▀▀█▄▄▄▄▀█ ▄▄ ▄   ▀▀▀▀ ▀▀▀▄▄▀█ ▀
 █▀██▄▄▀▀ █▀███ ▀▄▀█▄ ▀▀ █▀ █ ▀▄█
▄█▄▄██▄▄▀ ▀  ▄ ▄ ▄█ ▀█▄▀ ▄▄▄ █▀█ 
 ▄▄▄▄▄ █▄▀ █▄▄▀ ▀█▄▀█ █  █▄█  ▀▄█
 █   █ █ █▀ ▄ █▄ ▄█▀ ▀▄█ ▄▄▄ ▀█▄▄
 █▄▄▄█ █ ▄█▀▄▄▄ ▄██▀▀ ▀▀▄▀ ██ ▀▄█
▄▄▄▄▄▄▄█▄██▄▄▄▄▄█▄█▄███▄▄▄██▄██▄█

This deployment will be automatically cleaned up when the PR is closed.