Deploy main eacf1e7 to prod

Replaces #559, which conflicted.

Model: opus-5-5

script/css

@@ -0,0 +1,17 @@
+#!/bin/sh
+# script/css: regenerate static/css/tailwind.css (writes). tailwindcss is
+# never installed locally: it runs in docker, at the version and sha256
+# pinned in the Dockerfile's stylesheet stages, which also say what the
+# stylesheet is generated from. --no-cache, as on every docker build in
+# script/, so the stylesheet is generated rather than taken from the cache.
+set -eu
+
+ROOT="$(cd "$(dirname "$0")/.." && pwd -P)"
+
+main() {
+    cd "$ROOT"
+    docker build --no-cache \
+        --target css-output --output type=local,dest=static/css .
+}
+
+main "$@"