Append ?v=<git_commit_short> to /static/app.css, /static/app.js,
/static/map.js. Each deploy ⇒ new SHA ⇒ new URL ⇒ browsers re-fetch
on any reload, no Ctrl+Shift+R required. Symptom that prompted this:
fresh JS shipped to prod but the user kept running the cached one
because plain Ctrl+R can serve from disk cache when responses lack
explicit Cache-Control. Login page (which doesn't pass
git_commit_short) falls back to 'dev'.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>