fix(infra): dashboard opts out of the inject-fhirworx overlay the standard way (theme false), head tag restored

infra/nginx/index.html

@@ -11,12 +11,10 @@
          carries a version: the first 8 hex of the stylesheet's md5. Change it
          with every edit to dashboard.css so the page and its CSS arrive together. -->
     <link rel="stylesheet" href="/dashboard.css?v=c6219441">
-    <!-- The head end tag is left out on purpose (HTML allows it). Traefik's
-         inject-fhirworx middleware rewrites that tag on this host to append
-         /fhirworx.css, the overlay for third-party UIs, and its generic rules
-         (h1, h2, [class*=header], [class*=tag], a) override dashboard.css:
-         a small h1, a navy section bar that hides its heading, a mono box
-         around the tagline. Without the tag the rewrite has nothing to match. -->
+    <!-- dashboard is "theme" false in infra/traefik/dynamic/services.yml:
+         the inject-fhirworx overlay (fhirworx.css for third-party UIs) is not
+         applied here, so dashboard.css alone styles this page. -->
+</head>
 <body>
     <!-- Tile glyphs: Tabler Icons 3.41.0 outline (MIT), the set the marimo
          theme overlay already uses; database-search and link come from the

infra/traefik/dynamic/services.yml

@@ -1,6 +1,6 @@
 {{- $domain := env "DOMAIN" | default "fhirworx.io" -}}
 {{- $reef := dict
-  "dashboard"          (dict "port" "80"    "theme" true  "extra_hosts" (list $domain) "mw" "secure-headers")
+  "dashboard"          (dict "port" "80"    "theme" false "extra_hosts" (list $domain) "mw" "secure-headers")
   "docs"               (dict "port" "80"    "theme" false "mw" "git-sso,secure-headers")
   "git"                (dict "port" "3000"  "theme" false "mw" "secure-headers")
   "notebooks"          (dict "port" "2718"  "theme" false "mw" "git-sso,secure-headers")