Tier 1 static fixture: index.html only, no package.json, no server logic.