fix: configurar PWA para proxies y resolver error 500 en APIs

- Agregar headers CORS para manifest.webmanifest y service worker
- Configurar navigateFallback a /index.html con denylist para rutas API y Authentik
- Mapear SUPABASE_ANON_KEY a SUPABASE_SERVICE_ROLE_KEY en docker-compose
- Agregar headers Cross-Origin para PWA detrás de proxies

nuxt4-app/nuxt.config.ts

@@ -44,6 +44,30 @@ export default defineNuxtConfig({
       ]
     }
   },
+  nitro: {
+    routeRules: {
+      '/**': {
+        headers: {
+          'Cross-Origin-Embedder-Policy': 'require-corp',
+          'Cross-Origin-Opener-Policy': 'same-origin'
+        }
+      },
+      '/manifest.webmanifest': {
+        headers: {
+          'Access-Control-Allow-Origin': '*',
+          'Access-Control-Allow-Methods': 'GET',
+          'Content-Type': 'application/manifest+json'
+        }
+      },
+      '/sw.js': {
+        headers: {
+          'Service-Worker-Allowed': '/',
+          'Cache-Control': 'public, max-age=0'
+        }
+      }
+    }
+  },
+
   pwa: {
     registerType: 'autoUpdate',
     strategies: 'generateSW',
@@ -84,7 +108,8 @@ export default defineNuxtConfig({
     },
     workbox: {
       globPatterns: ['**/*.{js,css,html,png,svg,webp,ico,json,woff2}'],
-      navigateFallback: '/',
+      navigateFallback: '/index.html',
+      navigateFallbackDenylist: [/^\/api\//, /^\/outpost\.goauthentik\.io/],
       maximumFileSizeToCacheInBytes: 4 * 1024 * 1024,
       runtimeCaching: [
         {