v1.0.16

Changed

• CI: gate the web build. test.yml gains a parallel web job that
  runs npm ci && npm run build in web/, so a broken SPA build is
  caught on every push/PR instead of only when the Docker webbuild
  stage fails at release time.