Add entrypoint wrapper that translates LOG_LEVEL into nginx access_log control. When LOG_LEVEL is warn or higher, nginx access logs are suppressed. The frontend container now receives LOG_LEVEL via env_file (.env) — no new env vars needed.