Website service Makefile and Localization package fixes (#12)

This PR contains the work done to get the Website service building and running correctly in its Linux container. The service depends on the local _Localization_ package, whose String-Catalog localization was Darwin-only and broke the Docker build. Thus the localization internals have been reworked to be platform-agnostic and fixes the container build context so the local package is actually available during the build.

* Localization package
  * Replaced the Darwin-only `String.LocalizationValue` / `String(localized:)` path with a StringCatalog type that reads raw JSON from a given `.xcstrings` file, so lookups resolve identically on macOS and Linux.
  * The `LanguageList` now derives available languages from the catalog instead of `Bundle.localizations`
  * The `Negotiate` does explicit _Accept-Language_ matching (exact tag, then primary subtag) instead of the Linux-broken `Bundle.preferredLocalizations`.
  * Switched the catalog resource rule from `.process` to `.copy` (in both Localization and Website manifests) so the raw `.xcstrings` ships verbatim on every platform.
  * Introduced a `CatalogResolving` protocol as a seam between the localizers and the storage backend, enabling test injection and a future native-Apple backend without changing callers.

* Website Docker build
  * Build context moved to the repository root so the relative-path `Localization` package is inside the context; `Dockerfile`, `docker-compose.override.yml`, and the _img-release_ make target updated to the new context/paths.
  *  Added a root `.dockerignore` to keep the context lean.

Reviewed-on: rock-n-code/loud-amsterdam#12
Co-authored-by: Javier Cicchelli <javier@rock-n-code.com>
Co-committed-by: Javier Cicchelli <javier@rock-n-code.com>

Services/Website/Dockerfile

@@ -14,17 +14,18 @@ RUN export DEBIAN_FRONTEND=noninteractive DEBCONF_NONINTERACTIVE_SEEN=true \
 WORKDIR /build
 
 # First just resolve dependencies.
-# This creates a cached layer that can be reused
-# as long as your Package.swift/Package.resolved
-# files do not change.
-COPY ./Package.* ./
-RUN swift package resolve
+# This creates a cached layer that can be reused as long as the manifests do
+# not change. The Website package depends on the local Localization package via
+# a relative path, so its manifest must be present for resolution to succeed.
+COPY ./Packages/Localization/Package.swift ./Packages/Localization/
+COPY ./Services/Website/Package.swift ./Services/Website/Package.resolved ./Services/Website/
+RUN swift package --package-path ./Services/Website resolve
 
 # Copy entire repo into container
 COPY . .
 
 # Build the application, with optimizations, with static linking, and using jemalloc
-RUN swift build -c release \
+RUN swift build --package-path ./Services/Website -c release \
     --product "Website" \
     --static-swift-stdlib \
     -Xlinker -ljemalloc
@@ -33,17 +34,17 @@ RUN swift build -c release \
 WORKDIR /staging
 
 # Copy main executable to staging area
-RUN cp "$(swift build --package-path /build -c release --show-bin-path)/Website" ./
+RUN cp "$(swift build --package-path /build/Services/Website -c release --show-bin-path)/Website" ./
 
 # Copy static swift backtracer binary to staging area
 RUN cp "/usr/libexec/swift/linux/swift-backtrace-static" ./
 
 # Copy resources bundled by SPM to staging area
-RUN find -L "$(swift build --package-path /build -c release --show-bin-path)/" -regex '.*\.resources$' -exec cp -Ra {} ./ \;
+RUN find -L "$(swift build --package-path /build/Services/Website -c release --show-bin-path)/" -regex '.*\.resources$' -exec cp -Ra {} ./ \;
 
 # Copy the static files directory (served by FileMiddleware) if it exists
 # Ensure that by default, neither the directory nor any of its contents are writable.
-RUN [ -d /build/Resources ] && { mv /build/Resources ./Resources && chmod -R a-w ./Resources; } || true
+RUN [ -d /build/Services/Website/Resources ] && { mv /build/Services/Website/Resources ./Resources && chmod -R a-w ./Resources; } || true
 
 # ================================
 # Run image

Services/Website/Makefile

@@ -76,7 +76,8 @@ img-release: ## Build the production (amd64) image, tag with version + latest, p
 		--platform $(IMAGE_PLATFORM) \
 		--tag $(IMAGE_URL):$(version) \
 		--tag $(IMAGE_URL):latest \
-		.
+		--file Dockerfile \
+		../..
 	@echo "${HOST_PASSWORD}" \
 		| docker login $(HOST_CONTAINER) \
 			--username $(HOST_USER) \

Services/Website/Package.swift

@@ -91,7 +91,9 @@ let package = Package(
             ],
             path: "Sources/Library",
             resources: [
-                .process("Catalogs/Localizable.xcstrings")
+                // Copied verbatim rather than processed: the String Catalog is read as raw JSON at
+                // runtime so it resolves identically on Darwin and Linux (which cannot compile it).
+                .copy("Catalogs/Localizable.xcstrings")
             ]
         ),
         .testTarget(

Services/Website/Sources/Library/Public/Extensions/HTTPFieldName+Constants.swift

@@ -2,9 +2,9 @@ import HTTPTypes
 
 extension HTTPField.Name {
     /// The `Permissions-Policy` field name (not provided as a standard `HTTPField.Name`).
-    public static let permissionsPolicy = Self("Permissions-Policy")!
+    static let permissionsPolicy = Self("Permissions-Policy")!
     /// The `Referrer-Policy` field name (not provided as a standard `HTTPField.Name`).
-    public static let referrerPolicy = Self("Referrer-Policy")!
+    static let referrerPolicy = Self("Referrer-Policy")!
     /// The `X-Frame-Options` field name (not provided as a standard `HTTPField.Name`).
-    public static let frameOptions = Self("X-Frame-Options")!
+    static let frameOptions = Self("X-Frame-Options")!
 }

Services/Website/docker-compose.override.yml

@@ -12,7 +12,9 @@ services:
     image: ${IMAGE_NAME}:${IMAGE_TAG:-latest}
     platform: linux/arm64
     build:
-      context: .
-      dockerfile: Dockerfile
+      # The build context is the repo root so the local Localization package
+      # (referenced via ../../Packages/Localization) is inside the context.
+      context: ../..
+      dockerfile: Services/Website/Dockerfile
     environment:
       LOG_LEVEL: debug