Oh, hey, THAT'S why my Mastodon instance was getting bogus CSS. Apparently they changed it so all the assets and such get stuffed into the Docker image, not on the host filesystem (proxied in). Which makes a whole lot more sense, but does mean it breaks my setup made before that change.
At any rate, glad I fixed that. Now to look into this nifty new WebAuthn functionality...