f0d2d2e5ed
The about page was statically pre-rendered at build time using the
Dockerfile's dummy IMMICH_API_KEY. The portrait image token was
encrypted with sha256('build-placeholder') but decrypted at runtime
with sha256(real-key) → 400 Bad Request.