v0.4.6: MariaDB validation fix + dashboard deployed-only + protected stack restart

- Fix ValidateDump() to scan first 10 lines for header (MariaDB 11.4+ sandbox comment)
- Dashboard shows only deployed/protected stacks, heading "Telepített alkalmazások"
- Protected stacks show restart button when operational (both dashboard + stacks page)
- API blocks all actions except restart on protected stacks
- docker-setup.sh creates .felhom.yml for FileBrowser (subdomain: files)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

controller/internal/web/handlers.go

@@ -36,10 +36,18 @@ func (s *Server) dashboardHandler(w http.ResponseWriter, _ *http.Request) {
 		}
 	}
 
+	// Filter to deployed + protected stacks only for dashboard display
+	var deployedStacks []stacks.Stack
+	for _, st := range stackList {
+		if st.Deployed || st.Protected {
+			deployedStacks = append(deployedStacks, st)
+		}
+	}
+
 	sysInfo := system.GetInfo(s.cfg.Paths.HDDPath, s.cpuCollector)
 
 	data := s.baseData("dashboard", "Vezérlőpult")
-	data["Stacks"] = stackList
+	data["Stacks"] = deployedStacks
 	data["RunningCount"] = running
 	data["StoppedCount"] = stopped
 	data["TotalCount"] = len(stackList)