fix: limit cache bypass to browser revalidation

proto/next.config.ts

@@ -30,7 +30,7 @@ const nextConfig: NextConfig = {
   // Image optimization
   images: {
     formats: ['image/webp', 'image/avif'],
-    unoptimized: true,
+    minimumCacheTTL: 60 * 60 * 24 * 30, // 30 days
   },
   
   // Security headers
@@ -53,7 +53,7 @@ const nextConfig: NextConfig = {
           },
           {
             key: 'Cache-Control',
-            value: 'no-store, no-cache, must-revalidate, max-age=0',
+            value: 'private, no-cache, must-revalidate, max-age=0',
           },
           { key: 'Pragma', value: 'no-cache' },
           { key: 'Expires', value: '0' },

proto/src/app/layout.tsx

@@ -2,9 +2,6 @@ import type { Metadata } from "next";
 import { Geist, Geist_Mono } from "next/font/google";
 import "./globals.css";
 
-// The CMS must always expose the latest deployed content; do not retain route output.
-export const dynamic = 'force-dynamic';
-export const revalidate = 0;
 import Header from "../components/Header";
 import Footer from "../components/Footer";
 import { ThemeProvider } from "../components/ThemeProvider";