tknwise: production deploy fixes + hardening
Recovers and fixes the tknwise deployment.
App fixes
- .dockerignore no longer excludes server.js/package*.json (image had no backend)
- PORT from env (container on 3000); added /health
- Removed domainName/domainZone from the ALB pattern (apex-record conflict)
Hardening
- /api/stats now auth-gated (was leaking the full email list publicly)
- EFS mount at /app/data so waitlist data survives Fargate restarts
- DASHBOARD_SECRET via env instead of hardcoded default
Deployed and verified live at https://tknwise.agently.digitata.ai (ECS Fargate + ALB + EFS in account 785708522437; DNS record in the authoritative agently.digitata.ai zone in 633321546646).