update dockerfile

AGENT.md

@@ -18,8 +18,18 @@
 
 - `default` tenant currently builds via `ng build` and outputs to `dist/production`.
 - `tis` tenant builds via `ng build --configuration tis` and outputs to `dist/tis`.
+- `prebuild:tis` is tenant-scoped and should keep using scripts under `scripts/tis/*`.
 - Keep Docker `DIST_DIR` aligned with actual Angular output path.
 - Do not assume `default` Angular configuration is usable unless verified (it may reference missing replacements).
+- Do not use Angular `fileReplacements` for static assets (`.png`, `.jpg`, etc.); use tenant public assets or prebuild copy scripts.
+
+## Tenant PWA Rules
+
+- Keep tenant manifest files under tenant public assets (e.g. `public-tis/favicon/site.webmanifest`).
+- Ensure `manifest` `id`, `start_url`, and `scope` match actual deployment path:
+  - root deploy: `/`
+  - subpath deploy example: `/tis/`
+- Keep `<link rel="manifest">` path and branding config `manifestPath` aligned.
 
 ## Input Component Rules