phase 16: add registry/risk nginx proxies, add company form, network policies

frontend/nginx.conf

@@ -18,6 +18,24 @@ server {
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 
+    # Proxy Symbol Registry (companies CRUD, sources, watchlists, aliases)
+    location /registry/ {
+        proxy_pass http://symbol-registry:8000/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
+    # Proxy Risk Engine
+    location /risk/ {
+        proxy_pass http://risk:8000/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+    }
+
     # Cache static assets
     location /assets/ {
         expires 1y;