Covers decnet web / serve-web, env vars, admin credential enforcement, pages (Dashboard, DeckyFleet, LiveLogs, Attackers, AttackerDetail, Config, Bounty), JWT auth flow, must_change_password, server-side UI gating, client build, and CORS defaults.