Sync nginx confs to match live production + add shared-asset aliases

The committed .conf files were stale pre-certbot templates that no
longer matched what's actually running on gg1-roc-web1 (certbot --nginx
had rewritten 40k-rankings/aos-rankings/kingmaker's structure, and in
the process 40k-rankings and aos-rankings lost their security headers
entirely). Replaced each with the true live config, plus the new
location /images/ and location = /footer.html alias blocks that were
applied directly on the server.

Also fixed on gg1-roc-web1 while there (not reflected in this repo,
just noting for the record):
- kingmaker's TLS cert had expired 2026-08-26; renewed.
- certbot-renew.timer was enabled but never started (box hasn't
  rebooted in 172 days), so nothing was auto-renewing; started it and
  ran a full certbot renew, which also caught 40k-rankings/aos-rankings
  sitting inside their renewal window.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SBzcNkW7JcYipnAX6HfgmK

sites/scouting/scouting.gateway-gamers.net.conf

@@ -14,8 +14,8 @@ server {
     index index.html;
 
     # SSL — managed by Certbot
-    # ssl_certificate /etc/letsencrypt/live/scouting.gateway-gamers.net/fullchain.pem;
-    # ssl_certificate_key /etc/letsencrypt/live/scouting.gateway-gamers.net/privkey.pem;
+    ssl_certificate /etc/letsencrypt/live/scouting.gateway-gamers.net/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/scouting.gateway-gamers.net/privkey.pem;
     # include /etc/letsencrypt/options-ssl-nginx.conf;
     # ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;
 
@@ -35,8 +35,6 @@ server {
     # style attribute).
     add_header Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://newprod-api.bestcoastpairings.com; img-src 'self' data:;" always;
 
-    # Shared assets (images + footer) — single on-disk copy under shared/,
-    # deployed once and aliased by every gateway-gamers.net site.
     location /images/ {
         alias /var/www/domains/gateway-gamers.net/shared/images/;
     }
@@ -49,3 +47,4 @@ server {
         try_files $uri $uri/ =404;
     }
 }
+