structarb dash

Phase B.1 backend. The dashboard UI is B.2 — this page is a placeholder, and a successful sign-in only confirms the API is up.

No password set yet? Run bun dash/passwd.ts on the nano. Until then every operator route refuses, while the log stream keeps ingesting.