Connection hardening / performance

[extua]

• HSTS
• ECH
• Add rate limiting?
• Move static assets outside of repo
• Serve static assets with high Cache Control value
• Precompress html and CSS in build