Fix Apple Pay verification file — serve directly from nginx

With basePath=/shop the Next.js app can't serve /.well-known/ at the
domain root. Mount the file into the nginx container and serve it
directly instead.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -8,6 +8,7 @@ services:
       - "80:80"
     volumes:
       - ./nginx/nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./nginx/well-known:/etc/nginx/well-known:ro
     depends_on:
       main-site:
         condition: service_started

nginx/nginx.conf

@@ -63,12 +63,8 @@ http {
 
         # ── Apple Pay domain verification ────────────────────────────────────────
         location ^~ /.well-known/ {
-            proxy_pass         http://estore;
-            proxy_http_version 1.1;
-            proxy_set_header   Host              $host;
-            proxy_set_header   X-Real-IP         $remote_addr;
-            proxy_set_header   X-Forwarded-For   $proxy_add_x_forwarded_for;
-            proxy_set_header   X-Forwarded-Proto $scheme;
+            alias /etc/nginx/well-known/;
+            try_files $uri =404;
         }
 
         # ── eStore: /shop and everything under it ────────────────────────────────