chore(docker-dev): readiness-gated deploy.sh + Traefik access log for the first-POST 404

docker-dev/docker-compose.yml

@@ -914,6 +914,14 @@ services:
       - --providers.file.filename=/etc/traefik/dynamic.yml
       - --providers.file.watch=true
       - --api.insecure=true
+      # Access log, on deliberately: the 2026-08-17 live gate saw a transient 404 on the
+      # first POST /api/deployments (~40 s after boot) that can only mean "no router
+      # matched" — the AdminUI has no 404 path on that endpoint and a matched router with
+      # every server down answers 503. `defaultmode=keep` keeps RouterName/ServiceName in
+      # each line, which is empty on an unmatched request — that is how the next
+      # occurrence gets diagnosed. See docker-dev/README.md §"First-POST 404".
+      - --accesslog=true
+      - --accesslog.fields.defaultmode=keep
     ports:
       - "9200:80"  # host port 9200 → traefik :80 entrypoint (80 conflicts with scadabridge-traefik)
       - "8089:8080"  # 8080 conflicts with the sister scadalink dev stack