fix(api): align Phoenix stack with hub/NPM deploy (TLS edge, graphql-ws)

- tls-config: allow production HTTP when TERMINATE_TLS_AT_EDGE=1 (matches CT 7800)
- websocket: disable perMessageDeflate on graphql-ws server (RSV1 / proxy compatibility)
- server: remove unused @fastify/websocket (standalone ws + graphql-ws only)
- package: drop @fastify/websocket dependency; refresh lockfile
- .env.example: document HOST and TERMINATE_TLS_AT_EDGE for nginx-terminated TLS

Made-with: Cursor

api/.env.example

@@ -10,6 +10,10 @@ DB_PASSWORD=your_secure_password_here
 # Application Configuration
 NODE_ENV=development
 PORT=4000
+# Behind nginx/NPM: bind Apollo to loopback only (hub proxies to 127.0.0.1:4000).
+# HOST=127.0.0.1
+# When TLS terminates at the edge, production may run without local cert files.
+# TERMINATE_TLS_AT_EDGE=1
 
 # Keycloak Configuration (for Identity Service)
 KEYCLOAK_URL=http://localhost:8080