Wave 44: Service worker with offline fallback page

Lowest-risk service worker pattern: precaches only /offline.html and keeps normal pages network-first.