v0.326.0: FileBrowser's default password is checked at every FileBrowser start (R-977)

The probe ran once per box; a re-created FileBrowser data volume came back on admin/admin and was never probed
again (measured on scratch 9202 with 0.324.0). Now once per FileBrowser run (its StartedAt): the default found ->
a generated password, verified and stored encrypted; any other password -> nothing changes.
TestFileBrowserAdmin_R977_DefaultBackOnANewRunIsReplaced, red-proved. The comment "before a claim there is no
tunnel" was false and is corrected; the tunnel is not changed.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CHANGELOG.md

@@ -1,4 +1,17 @@
-## Unreleased (2026-10-17) — the decoy suite is a gate of the full run (R-1116); no code change
+## v0.326.0 — FileBrowser's default password is checked at every FileBrowser start; the decoy suite is a gate (2026-10-17)
+
+**MinAgent: 0.158.1** — the floor's, carried. Nothing here calls the agent. No golden (`09` §3 decision 250). Task:
+„Tester 1 back on the live catalog, decoy suites, memory limits, FileBrowser" (felhom.eu
+`REPORT-tester1-limits-filebrowser-2026-10-17.md`).
+
+- **R-977 (FileBrowser part)** — `EnsureFileBrowserAdminPassword` probes the default login once per FileBrowser RUN
+  (the container's StartedAt), not once per box. Measured first on scratch 9202 with 0.324.0: FileBrowser and its data
+  volume removed, the box brought it back on its own — the default login answered 200 while the box kept its old
+  „generated" record. Now such a run is reset at its first tick (a generated password, verified both ways, stored
+  encrypted); a run on any other password — the household's own — changes nothing. `TestFileBrowserAdmin_R977_*`,
+  red-proved (the old once-per-box return keeps the default). The code comment „before a claim there is no tunnel"
+  was false (the claim is reached through the tunnel) and is corrected; the tunnel itself is NOT changed — R-1120.
+- **R-1116** — the decoy suite is a gate of the full run (below, the helper's note).
 
 - **`gate-decoys`** (`controller/scripts/test_gate_decoys.py`) is now a row of `controller_gates.py`: the full run,
   blocking, NOT `--fast`. It was in no runner — the shape that let the catalog's R-1115 fail unseen for a night. Not