feat: initial Hugo blog for internetforkids.ong

Child safety marketing blog with:
- First article: Global Child Protection Laws 2026 (EN/DE)
- Interactive world map (17 countries, TopoJSON)
- SEO: JSON-LD, OpenGraph, hreflang, canonical URLs
- AI search: robots.txt, llms.txt, FAQ sections
- VPN CTA shortcode, about pages, tag taxonomy
- Rybbit analytics partial (site ID TBD)
- Dockerfile + nginx.conf for deployment

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

nginx.conf

@@ -0,0 +1,37 @@
+server {
+    listen 80;
+    server_name _;
+    root /usr/share/nginx/html;
+    index index.html;
+
+    # Security headers
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-Frame-Options "SAMEORIGIN" always;
+    add_header Referrer-Policy "strict-origin-when-cross-origin" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+
+    # Gzip
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml text/javascript image/svg+xml;
+    gzip_min_length 256;
+
+    # Cache static assets
+    location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
+        expires 30d;
+        add_header Cache-Control "public, immutable";
+    }
+
+    # Cache HTML with short TTL for freshness
+    location ~* \.html$ {
+        expires 1h;
+        add_header Cache-Control "public, must-revalidate";
+    }
+
+    # Clean URLs
+    location / {
+        try_files $uri $uri/ $uri.html =404;
+    }
+
+    # Custom 404
+    error_page 404 /404.html;
+}