feat(app): add prerender, self-hosted fonts and privacy page

Fonts come from npm, not Google, so no third-party font requests.
Pages are prerendered at build time; browser-only code is guarded.
nginx serves per-route HTML, a real 404 and gzip.

angular.json

@@ -41,6 +41,10 @@
               }
             ],
             "styles": [
+              "node_modules/@fontsource/roboto/300.css",
+              "node_modules/@fontsource/roboto/400.css",
+              "node_modules/@fontsource/roboto/500.css",
+              "node_modules/material-icons/iconfont/filled.css",
               "src/tailwind.css",
               "src/styles.scss",
               "node_modules/swiper/swiper-bundle.css"
@@ -60,7 +64,17 @@
                   "maximumError": "8kB"
                 }
               ],
+              "optimization": {
+                "scripts": true,
+                "styles": {
+                  "minify": true,
+                  "inlineCritical": false
+                },
+                "fonts": true
+              },
               "outputHashing": "all",
+              "outputMode": "static",
+              "server": "src/main.server.ts",
               "serviceWorker": "ngsw-config.json"
             },
             "development": {