http_static_policies Production-ready static file serving policies with cache control and security defaults.