feat: ship self-hosted KOC LOOP workflows

deploy/nginx/Dockerfile

@@ -0,0 +1,11 @@
+FROM node:22.18.0-bookworm-slim AS portal-builder
+WORKDIR /portal
+ENV NEXT_TELEMETRY_DISABLED=1
+COPY koc-portal/package.json koc-portal/package-lock.json ./
+RUN npm ci
+COPY koc-portal/ ./
+RUN npm run build
+
+FROM nginx:1.27-alpine
+COPY deploy/nginx/koc-loop.conf /etc/nginx/conf.d/default.conf
+COPY --from=portal-builder /portal/out /usr/share/nginx/html/koc

deploy/nginx/koc-loop.conf

@@ -0,0 +1,39 @@
+server {
+  listen 80;
+  server_name _;
+
+  client_max_body_size 10m;
+
+  location = /koc {
+    return 301 /koc/$is_args$args;
+  }
+
+  location /koc/ {
+    alias /usr/share/nginx/html/koc/;
+    try_files $uri $uri/ /koc/index.html;
+    add_header X-Robots-Tag "noindex, nofollow, noarchive" always;
+    add_header Referrer-Policy "no-referrer" always;
+  }
+
+  location /api/mcp {
+    proxy_pass http://app:3000;
+    proxy_http_version 1.1;
+    proxy_buffering off;
+    proxy_read_timeout 3600s;
+    proxy_send_timeout 3600s;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+  }
+
+  location / {
+    proxy_pass http://app:3000;
+    proxy_http_version 1.1;
+    proxy_set_header Host $host;
+    proxy_set_header X-Real-IP $remote_addr;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto $scheme;
+    proxy_read_timeout 180s;
+  }
+}