build: use $WEBROOT consistently