Docker hardening (non-root, healthcheck, .dockerignore, log caps) + UI table/typography polish

static/style.css

@@ -51,7 +51,7 @@
 body {
   margin: 0;
   color: var(--ink);
-  font: 16px/1.55 ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif;
+  font: 16px/1.55 "Inter", ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif;
   -webkit-font-smoothing: antialiased;
   text-rendering: optimizeLegibility;
 
@@ -263,6 +263,22 @@ textarea { resize: vertical; min-height: 64px; }
 .cardcell-meta { font-size: 12.5px; color: var(--muted); }
 .dash { color: var(--muted); }
 
+/* Table refinements the density audit turned up: dates were wrapping onto
+   two lines, action buttons were stacking vertically in a cramped cell, and
+   confidence read as one more grey word. */
+.cell-when { white-space: nowrap; font-variant-numeric: tabular-nums; }
+.cell-conf {
+  font-size: 11px; font-weight: 700; letter-spacing: .08em;
+  text-transform: uppercase;
+}
+.cell-conf.conf-high { color: var(--good-text); }
+.cell-conf.conf-medium { color: var(--warning); }
+.cell-conf.conf-low { color: var(--muted); }
+.row-actions {
+  display: flex; gap: 7px; justify-content: flex-end;
+  white-space: nowrap;
+}
+
 /* --------------------------------------------------------------- pills */
 
 .pill {
@@ -471,3 +487,12 @@ textarea { resize: vertical; min-height: 64px; }
   .slab-grade { width: 108px; padding: 16px 8px; }
   .slab-grade .n { font-size: 44px; }
 }
+
+/* On a narrow phone the five-column history table forces sideways
+   scrolling. Confidence is the most expendable column there — the grade
+   pill and the card name are what someone is actually scanning for, and
+   confidence is still shown in the card's detail view. */
+@media (max-width: 560px) {
+  #history-table th:nth-child(3),
+  #history-table td:nth-child(3) { display: none; }
+}