Make grafana viewable

[jeremyestein]

Fixes SAFEHR-data/waveform-controller#92

Tightly coupled to SAFEHR-data/waveform-controller#94

Add Waveform Grafana to the Emap portal reverse proxy.

This is intended to be temporary, as we will have GAE-level grafana (etc) in the near future. Therefore I have not worried about what will happen if the manually-created docker network that connects the containers is absent.

[github-actions]

PR checklist

Default guide for a PR (if multiple PRs for the work, only keep one version of it and link to it on the other PRs)

• From the UCLH data science desktop, a validation run has been set off
• Check that content that reveals Epic IP (eg. Clarity/Caboodle queries) has not been checked into a public repo.
• load times
  in UCL teams has been populated with the run information
• During the run, glowroot has been checked for any queries which are taking a substantial proportion of the
  total processing time. This can be useful to identify indexes that are required.
• After the run, look for any unexpected errors in the etl_per_message_logging table, the error_search.sql file
  on the shared drive can be used for this \\sharefs6\UCLH6\EMAP\Shared\EmapSqlScripts\devops\error_search.sql.
  Create an issue if you find an unexpected exception and is not related to the changes you've made, otherwise
  fix them!
• After the run, populate the end time in
  load times
• Let Aasiyah know about the completed validation and give her information on the changes and where to start
  with the validation
• Check validation report and give any feedback to Aasiyah if there are any changes needed on her side,
  iterate on getting the validation to match at least 99% (validation and emap code).

[thompson318]

I couldn't see much wrong with it. I ran it through Claude code which raised a couple of issues with proxy_pass. I've included them as suggestions here. Apologies if they're no use. Let me know if you need more explanation.

[thompson318]

Suggested change

	proxy_pass $glowroot_upstream/;
	# proxy_pass with a variable can't strip the location prefix itself,
	# so strip it with rewrite (which preserves the query string) first.
	rewrite ^/glowroot/(.*)$ /$1 break;
	proxy_pass $glowroot_upstream;

My URI and proxy knowledge isn't great. This suggestion came from Claude.

[thompson318]

Suggested change

	proxy_pass $streamlit_upstream/streamlit/;
	# No URI part after the variable, so the full original request URI
	# (including the /streamlit/ prefix, path and query string) is
	# forwarded unchanged.
	proxy_pass $streamlit_upstream;

This also came from Claude. It makes sense to me in that adding the streamlit suffix will remove any query string ie. /streamlit/page1?foo=bar would become just /streamlit/. Is that an issue for us?