Wired up the Website deployment for the POC prototype.

Services/Website/docker-compose.override.yml

@@ -18,6 +18,9 @@ services:
       dockerfile: Services/Website/Dockerfile
     environment:
       LOG_LEVEL: debug
+      # Served over plain HTTP on localhost — the one place browsers run WebAuthn without HTTPS. Not 127.0.0.1.
+      SITE_ORIGIN: http://localhost:${HOST_PORT:-8080}
+      PASSKEYS_ORIGIN: http://localhost:${HOST_PORT:-8080}
       HTTPS_TRUST_FORWARDED_PROTO: "false"
       RATE_LIMIT_TRUST_FORWARDED_FOR: "false"
       DATABASE_DRIVER: ${DATABASE_DRIVER:-inMemory}