v0.22.0: First-run setup wizard, local infra backup, hub verification

New controller features:
- Web-based setup wizard replaces docker-setup.sh interactive config
  - Dual listener: :8080 (Traefik) + :8081 (direct HTTP for LAN)
  - Drive scanner finds .felhom-infra-backup/ on all block devices
  - Hub recovery pull (GET /api/v1/recovery/{id}) with retrieval password
  - Fresh install: Hub config download or manual wizard
  - CSRF protection, state persistence, Hungarian UI
- Local infra backup written to all connected drives after each backup cycle
  - .felhom-infra-backup/backup.json + metadata.json with SHA256 checksum
- Hub verification: parse customer_blocked from report push response
  - Limited mode after 7 days without verification
- Recovery info page on Settings + recovery-info.txt file generation
- Pending events queue: DR events sent to Hub on next report push
- docker-setup.sh v6.0.0: removed interactive wizard, minimal controller.yaml only

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

controller/internal/setup/setup.go

@@ -0,0 +1,132 @@
+package setup
+
+import (
+	"encoding/json"
+	"fmt"
+	"log"
+	"os"
+	"path/filepath"
+	"sync"
+
+	"gitea.dooplex.hu/admin/felhom-controller/internal/config"
+)
+
+// NeedsSetup checks whether the controller should enter setup mode.
+func NeedsSetup(cfg *config.Config) bool {
+	return cfg.Customer.ID == "" || cfg.Customer.ID == "demo-felhom"
+}
+
+// SetupState persists wizard progress to survive browser crashes.
+type SetupState struct {
+	mu   sync.Mutex `json:"-"`
+	path string     `json:"-"`
+
+	Step     string            `json:"step"`      // "welcome", "scan", "hub-restore", "restore-exec", "fresh-hub", "fresh-manual", "done"
+	Mode     string            `json:"mode"`      // "restore" or "fresh"
+	FormData map[string]string `json:"form_data"` // partially filled form fields
+
+	SelectedBackup *SelectedBackup `json:"selected_backup,omitempty"`
+}
+
+// SelectedBackup tracks which backup the user chose.
+type SelectedBackup struct {
+	Source     string `json:"source"`      // "local" or "hub"
+	DrivePath  string `json:"drive_path"`  // for local
+	CustomerID string `json:"customer_id"`
+	Timestamp  string `json:"timestamp"`
+}
+
+// LoadState loads or creates setup state from the data directory.
+func LoadState(dataDir string) *SetupState {
+	path := filepath.Join(dataDir, "setup-state.json")
+	s := &SetupState{path: path, Step: "welcome"}
+
+	data, err := os.ReadFile(path)
+	if err != nil {
+		return s // fresh state
+	}
+	if err := json.Unmarshal(data, s); err != nil {
+		return &SetupState{path: path, Step: "welcome"}
+	}
+	s.path = path
+	return s
+}
+
+// Save persists the setup state atomically.
+func (s *SetupState) Save() error {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+
+	if s.FormData == nil {
+		s.FormData = make(map[string]string)
+	}
+
+	data, err := json.MarshalIndent(s, "", "  ")
+	if err != nil {
+		return fmt.Errorf("marshaling setup state: %w", err)
+	}
+
+	if err := os.MkdirAll(filepath.Dir(s.path), 0755); err != nil {
+		return err
+	}
+
+	tmp := s.path + ".tmp"
+	if err := os.WriteFile(tmp, data, 0600); err != nil {
+		os.Remove(tmp)
+		return err
+	}
+	if err := os.Rename(tmp, s.path); err != nil {
+		os.Remove(tmp)
+		return err
+	}
+	return nil
+}
+
+// SetStep updates the current step and saves.
+func (s *SetupState) SetStep(step string) {
+	s.mu.Lock()
+	s.Step = step
+	s.mu.Unlock()
+	if err := s.Save(); err != nil {
+		// Best effort — don't crash
+	}
+}
+
+// SetFormField saves a form field for state persistence.
+func (s *SetupState) SetFormField(key, value string) {
+	s.mu.Lock()
+	if s.FormData == nil {
+		s.FormData = make(map[string]string)
+	}
+	s.FormData[key] = value
+	s.mu.Unlock()
+}
+
+// GetFormField retrieves a saved form field.
+func (s *SetupState) GetFormField(key string) string {
+	s.mu.Lock()
+	defer s.mu.Unlock()
+	if s.FormData == nil {
+		return ""
+	}
+	return s.FormData[key]
+}
+
+// Remove deletes the setup state file.
+func (s *SetupState) Remove() {
+	os.Remove(s.path)
+}
+
+// DefaultHubURL is the default Hub URL.
+const DefaultHubURL = "https://hub.felhom.eu"
+
+// LogSetupMode logs the setup mode startup message.
+func LogSetupMode(domain string, ips []string, setupListen string, logger *log.Logger) {
+	logger.Printf("[INFO] Controller in setup mode — waiting for configuration via web UI")
+	if domain != "" {
+		logger.Printf("[INFO] Setup wizard available at: https://felhom.%s", domain)
+	}
+	for _, ip := range ips {
+		logger.Printf("[INFO] Setup wizard available at: http://%s%s", ip, setupListen)
+	}
+}