Project updates from Template

This commit contains the latest updates from the generic Website template, which rework the compression and localization:

- Reworked the compression and localization in the Infrastructure package. (3c568e4)
- Adopted the reworked compression and localization in the Website service. (08cf3e3)

The template commit that only touched the root README (53676ed) was left out, as this project no longer carries that file.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

Services/Website/Sources/App/Extensions/App+Build.swift

@@ -1,6 +1,5 @@
 import Configuration
 import Hummingbird
-import HummingbirdCompression
 import Localization
 import Logging
 import Persistence
@@ -140,19 +139,11 @@ private func logger(
 
 /// Builds the application's router.
 ///
-/// Registers the request-logging middleware, the security-headers middleware that stamps the given `securityHeaders` onto every response, the
-/// HTTPS-redirect middleware that bounces requests forwarded over plain HTTP to the canonical origin, the trailing-slash redirect middleware that
-/// collapses each path onto its canonical form, the vary middleware that marks every response as varying on `Accept-Encoding`, the response-compression middleware that compresses responses
-/// larger than `minimumResponseSizeToCompress` when the client advertises support, the localization middleware that negotiates the request's
-/// language from its `Accept-Language` header (honouring the `lang` query override and the language a leading path segment names), the
-/// not-found middleware that serves the not-found page, and the static file middleware that serves the
-/// contents of `staticFilesPath` (tagging responses with the given `cacheControl` directives), then adds the `RootController` routes that
-/// render the landing page — one per language the String Catalog serves — and the `HealthController` routes that serve the health check.
-///
-/// The security-headers middleware sits just inside request logging so it covers every response that reaches a client — the landing page, the compressed
-/// responses, the rendered not-found page, and the served static files. The HTTPS redirect sits directly beneath it, so a redirect carries the security
-/// headers but skips the negotiation, compression, and file lookup it would otherwise pay for. The trailing-slash redirect follows it, ahead of the
-/// routes and `FileMiddleware` that would otherwise answer both spellings of every path.
+/// The chain below reads as its own list; the order is what does not. Security headers sit just inside request logging, so they reach every response a
+/// client sees — pages, compressed bodies, the not-found page, the served files. The HTTPS redirect sits directly beneath, keeping those headers while
+/// skipping the compression and file lookup it would otherwise pay for. The trailing-slash redirect follows, ahead of the routes and `FileMiddleware`
+/// that would otherwise answer both spellings of every path. The language is negotiated by the responders that read it — the landing route and the
+/// not-found middleware — rather than on every request past.
 /// - Parameters:
 ///   - staticFilesPath: the folder, relative to the working directory, the static files are served from.
 ///   - assetVersion: the version token the pages append to their asset URLs, or `nil` to leave them unversioned.
@@ -196,10 +187,9 @@ private func router(
         )
         TrailingSlashRedirectMiddleware()
         VaryMiddleware()
-        ResponseCompressionMiddleware(
+        CompressionMiddleware(
             minimumResponseSizeToCompress: compressionMinResponseSize
         )
-        LocalizationMiddleware()
         NotFoundMiddleware(
             assetVersion: assetVersion,
             analytics: analytics