Replace flat intrastack network with 5 purpose-scoped zones (gateway,
storage, data, observability, ci) so compromised containers cannot
reach unrelated services. Add local-only and infra-headers Traefik
middlewares with per-service assignments via reef mw key.
Rename nes-sports theme to throwback with Tecmo Super Bowl palette:
deep navy backgrounds, white text, patriotic red/blue accents. Remove
CRT scanlines, power-on animation, starfield, and neon glow effects.
5d512ff2ed
