fix: use web entrypoint instead of websecure for Cloudflare tunnel compatibility

rstack.online was returning 404 because the Traefik router was configured
for the websecure entrypoint, but traffic arrives via Cloudflare tunnel on
the web entrypoint. Also removed from rspace-redirects to prevent redirect
loop through rspace.online/rstack/ -> rstack.rspace.online/ -> 404.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docker-compose.yml

@@ -1,21 +1,28 @@
 services:
   rstack:
-    build: .
     restart: unless-stopped
     labels:
-      - "traefik.enable=true"
-      - "traefik.http.routers.rstack.rule=Host(`rstack.online`) || Host(`www.rstack.online`) || HostRegexp(`{subdomain:[a-z0-9-]+}.rstack.online`)"
-      - "traefik.http.routers.rstack.priority=130"
-      - "traefik.http.services.rstack.loadbalancer.server.port=80"
+    - traefik.enable=true
+    - traefik.http.routers.rstack.rule=Host(`rstack.online`) || Host(`www.rstack.online`)
+      || HostRegexp(`{subdomain:[a-z0-9-]+}.rstack.online`)
+    - traefik.http.routers.rstack.priority=130
+    - traefik.http.routers.rstack.entrypoints=web
+    - traefik.http.services.rstack.loadbalancer.server.port=80
     healthcheck:
-      test: ["CMD", "wget", "--no-verbose", "--tries=1", "--spider", "http://127.0.0.1:80/"]
+      test:
+      - CMD
+      - wget
+      - --no-verbose
+      - --tries=1
+      - --spider
+      - http://127.0.0.1:80/
       interval: 30s
       timeout: 10s
       retries: 3
       start_period: 15s
     networks:
-      - traefik-public
-
+    - traefik-public
+    image: localhost:3000/jeffemmett/rstack-online:${IMAGE_TAG:-latest}
 networks:
   traefik-public:
     external: true