Renamed the Web package as Infrastructure (#25)

This PR contains the work done to rename the _Web_ package as _Infrastructure_, to provide a clear naming and purpose to this particular package within the project.

To provide further details about the work:

* Infrastructure
  * Asset fingerprinting: an FNV-1a token derived from the static files directory, appended as ?v= to asset URLs so deploys bust caches; pre-rendered pages also revalidate via weak ETags.
  * New middlewares: fixed-window RateLimitMiddleware (per-client budgets keyed by trusted X-Forwarded-For or remote address) and VaryMiddleware (Accept-Encoding on every response); SecurityHeadersMiddleware now also stamps error responses.
  * Auto-generated HEAD endpoints, cache max-age configuration, and Docker build/Compose refinements.
  * Protocols and scaffolding: Asset/AssetExtension, the Page protocol (viewport, stylesheets, scripts, versioned URLs), and LocalizedRequestContext.
  * Rate limiter's counter store swapped from an actor to a Mutex (no executor hop per request) with amortized batch eviction instead of O(n²) scans under client floods.
  * FingerprintAssets reports unreadable files to a logger instead of silently producing a token that never busts their cache.

Reviewed-on: rock-n-code/loud-amsterdam#25
Co-authored-by: Javier Cicchelli <javier@rock-n-code.com>
Co-committed-by: Javier Cicchelli <javier@rock-n-code.com>

Services/Website/Sources/Library/Public/Extensions/AbsoluteConfigKey+Constants.swift

@@ -3,7 +3,9 @@ import Configuration
 extension AbsoluteConfigKey {
     /// A namespace for the static files cache configuration keys, as absolute keys.
     public enum Cache {
-        /// The absolute configuration key for the max-age, in seconds, applied to text-based static files.
+        /// The absolute configuration key for the max-age, in seconds, applied to fingerprinted assets and fonts.
+        public static let maxAgeAsset: AbsoluteConfigKey = .init(.Cache.maxAgeAsset)
+        /// The absolute configuration key for the max-age, in seconds, applied to unversioned text-based static files.
         public static let maxAgeText: AbsoluteConfigKey = .init(.Cache.maxAgeText)
         /// The absolute configuration key for the max-age, in seconds, applied to image static files.
         public static let maxAgeImage: AbsoluteConfigKey = .init(.Cache.maxAgeImage)
@@ -50,6 +52,15 @@ extension AbsoluteConfigKey {
         /// The absolute configuration key for the minimum log level.
         public static let level: AbsoluteConfigKey = .init(.Log.level)
     }
+    /// A namespace for the rate limit configuration keys, as absolute keys.
+    public enum RateLimit {
+        /// The absolute configuration key for the number of requests admitted per client per window.
+        public static let limit: AbsoluteConfigKey = .init(.RateLimit.limit)
+        /// The absolute configuration key for the window length, in seconds.
+        public static let window: AbsoluteConfigKey = .init(.RateLimit.window)
+        /// The absolute configuration key for keying clients by the first `X-Forwarded-For` entry.
+        public static let trustForwardedFor: AbsoluteConfigKey = .init(.RateLimit.trustForwardedFor)
+    }
     /// A namespace for the path configuration keys, as absolute keys.
     public enum Path {
         /// The absolute configuration key for the directory the static files are served from.

Services/Website/Sources/Library/Public/Extensions/ConfigKey+Constants.swift

@@ -3,7 +3,9 @@ import Configuration
 extension ConfigKey {
     /// A namespace for the static files cache configuration keys.
     public enum Cache {
-        /// The configuration key for the max-age, in seconds, applied to text-based static files (CSS, JavaScript, plain text).
+        /// The configuration key for the max-age, in seconds, applied to fingerprinted assets (CSS, JavaScript) and fonts.
+        public static let maxAgeAsset: ConfigKey = "cache.maxAge.asset"
+        /// The configuration key for the max-age, in seconds, applied to unversioned text-based static files (e.g. plain text).
         public static let maxAgeText: ConfigKey = "cache.maxAge.text"
         /// The configuration key for the max-age, in seconds, applied to image static files (ICO, PNG, SVG).
         public static let maxAgeImage: ConfigKey = "cache.maxAge.image"
@@ -50,6 +52,15 @@ extension ConfigKey {
         /// The configuration key for the minimum log level.
         public static let level: ConfigKey = "log.level"
     }
+    /// A namespace for the rate limit configuration keys.
+    public enum RateLimit {
+        /// The configuration key for the number of requests admitted per client per window.
+        public static let limit: ConfigKey = "rateLimit.limit"
+        /// The configuration key for the window length, in seconds.
+        public static let window: ConfigKey = "rateLimit.window"
+        /// The configuration key for keying clients by the first `X-Forwarded-For` entry (enable only behind a trusted proxy).
+        public static let trustForwardedFor: ConfigKey = "rateLimit.trustForwardedFor"
+    }
     /// A namespace for the path configuration keys.
     public enum Path {
         /// The configuration key for the directory the static files are served from.

Services/Website/Sources/Library/Public/Extensions/HTTPFieldName+Constants.swift

@@ -1,10 +0,0 @@
-import HTTPTypes
-
-extension HTTPField.Name {
-    /// The `Permissions-Policy` field name (not provided as a standard `HTTPField.Name`).
-    static let permissionsPolicy = Self("Permissions-Policy")!
-    /// The `Referrer-Policy` field name (not provided as a standard `HTTPField.Name`).
-    static let referrerPolicy = Self("Referrer-Policy")!
-    /// The `X-Frame-Options` field name (not provided as a standard `HTTPField.Name`).
-    static let frameOptions = Self("X-Frame-Options")!
-}

Services/Website/Sources/Library/Public/Extensions/Int+Constants.swift

@@ -1,7 +1,9 @@
 extension Int {
     /// A namespace for the cache's default configuration values.
     public enum Cache {
-        /// The default max-age, in seconds, applied to text-based static files (1 hour).
+        /// The default max-age, in seconds, applied to fingerprinted assets and fonts (1 year).
+        public static let maxAgeAsset = 31_536_000
+        /// The default max-age, in seconds, applied to unversioned text-based static files (1 hour).
         public static let maxAgeText = 3_600
         /// The default max-age, in seconds, applied to image static files (1 week).
         public static let maxAgeImage = 604_800

Services/Website/Sources/Library/Public/Extensions/LocalizationMiddleware+Defaults.swift

@@ -0,0 +1,13 @@
+import Foundation
+import Infrastructure
+
+public extension LocalizationMiddleware {
+
+    // MARK: Initializers
+
+    /// Creates a localization middleware that negotiates against the module's String Catalog languages.
+    init() {
+        self.init(bundle: .module)
+    }
+
+}

Services/Website/Sources/Library/Public/Extensions/NotFoundMiddleware+Defaults.swift

@@ -0,0 +1,21 @@
+import Foundation
+import Infrastructure
+
+public extension NotFoundMiddleware {
+
+    // MARK: Initializers
+
+    /// Creates a not-found middleware that renders the website's error page, localized to the module's String Catalog languages.
+    /// - Parameter assetVersion: the version token appended to the page's asset URLs, or `nil` (the default) to leave them unversioned.
+    init(
+        assetVersion: String? = nil
+    ) {
+        self.init(bundle: .module) {
+            ErrorPage(
+                locale: $0,
+                assetVersion: assetVersion
+            )
+        }
+    }
+
+}

Services/Website/Sources/Library/Public/Extensions/String+Constants.swift

@@ -23,27 +23,6 @@ extension String {
         /// The directory, relative to the working directory, that the website's static files are served from.
         public static let staticResources = "Resources/Static"
     }
-    /// A namespace for the security headers' default configuration values.
-    ///
-    /// `Strict-Transport-Security` is intentionally absent: it is only safe over HTTPS and is
-    /// "sticky" in browsers, so it stays off unless explicitly configured in production.
-    public enum Security {
-        /// The default `Content-Security-Policy`.
-        ///
-        /// Restricts every resource to the site's own origin (`default-src 'self'`), blocks plugins
-        /// (`object-src 'none'`), pins the document base URL (`base-uri 'self'`), and forbids framing
-        /// (`frame-ancestors 'none'`). Both pages link external stylesheets, so no inline-style
-        /// exception is required.
-        public static let contentSecurityPolicy = "default-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
-        /// The default `X-Content-Type-Options` (disables MIME sniffing).
-        public static let contentTypeOptions = "nosniff"
-        /// The default `X-Frame-Options` (forbids framing the page).
-        public static let frameOptions = "DENY"
-        /// The default `Referrer-Policy`.
-        public static let referrerPolicy = "strict-origin-when-cross-origin"
-        /// The default `Permissions-Policy` (denies access to powerful browser features the site does not use).
-        public static let permissionsPolicy = "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()"
-    }
     /// A namespace for the server string constants.
     public enum Server {
         /// The website server's name.