hugo server/build was failing with "binary postcss is not a Node.js script" — pnpm's default node_modules/.bin shims are shell wrappers, not plain Node scripts, which Hugo's exec-security check rejects. Switches head.html from css.PostCSS to css.TailwindCSS, drops the now-unused PostCSS toolchain, and adds pnpm-workspace.yaml's preferSymlinkedExecutables so pnpm emits real symlinks Hugo can exec (same fix already in use on roux). Also updates the Dockerfile's build stage to hugomods/hugo:debian-node, which bundles the matching Hugo Extended + Node versions, keeping ffmpeg for the video-compression step. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_012E2mmywuZyXmPBgSDtNdTL