Serve .msi as download and update installer link

Add nginx rule to serve .msi files as application/octet-stream with Content-Disposition: attachment and X-Content-Type-Options: nosniff, returning 404 when missing. Update Home.vue to build the installer download URL from import.meta.env.BASE_URL and bind it to the CTA link (using :href) instead of a hardcoded path, ensuring the installer link respects the app base URL.

nginx.conf

@@ -12,6 +12,13 @@ server {
         try_files $uri $uri/ /index.html;
     }
 
+    location ~* \.msi$ {
+        default_type application/octet-stream;
+        add_header Content-Disposition 'attachment';
+        add_header X-Content-Type-Options nosniff;
+        try_files $uri =404;
+    }
+
     # Let real 404s for assets return 404s; Vue handles route-level 404 via the SPA fallback above.
 
     location /static/ {