docs: CHANGELOG v0.96.0 + REPORT (TASK-D0) + CONTEXT + README design-system section

CONTEXT.md

@@ -7,7 +7,28 @@
 >
 > Ask Claude Code: "Please update CONTEXT.md with what we did today"
 
-Last updated: 2026-07-01 (v0.95.0 — enrollment wizards use the raw-device scan; end-to-end raw enrollment live)
+Last updated: 2026-07-02 (v0.96.0 — TASK-D0 design system v2 re-skin; live on 9201)
+
+> **2026-07-02 — v0.96.0 (deployed on 9201): TASK-D0 — design system v2 re-skin (appearance only).**
+> The whole customer UI (dashboard AND setup wizard) now renders in the approved v2 language: navy
+> token palette (`--bg-0/1/2, --line, --text-1/2/3, --blue, --warn, --crit`), single 2px radius, no
+> shadows; **exception-based status color** — nominal is blue/neutral, amber/red only on deviation;
+> zone bars → the hairline `.meter` (neutral 70/85 ticks, warn/crit flag „Fogyóban a hely" /
+> „Kritikusan kevés hely"); pills → `.tag` / `.metarow`. **Decisions:** (a) `stateColor` semantics
+> changed — **stopped/exited = neutral, NOT red** (operator-approved; failures surface via unhealthy
+> + alerts); restarting = warn; outputs are now `run/progress/warn/neutral/off` and
+> `nominal/warn/crit` — any new template MUST use these suffixes (truth tables guarded by unit tests,
+> `stateLabel` copy frozen byte-identical). (b) Fonts (PJS + JBM variable woff2, latin+latin-ext) and
+> a 30-icon Lucide sprite are **vendored in the binary** (`/static/fonts/`, `templates/icons.html`)
+> — no CDN; `fonts.googleapis.com`, `box-shadow`, 999px and the emoji set are banned strings (grep
+> gate in REPORT §5, 143→0). (c) Setup wizard `handleCSS` bug fixed: it read a dataDir-derived path
+> that never exists in the container → always served minimalCSS in production; now serves embedded
+> `web.StyleCSS()`. (d) Found+fixed pre-existing v0.93.0 bug: `/backups` 500'd once an off-box backup
+> had run (`OffboxTarget.LastRun` is an RFC3339 string fed to `timeAgo`; new `timeAgoStr`).
+> Canonical reference: `felhom.eu/documentation/design/design-system.md`. **Next: D1** (settings IA
+> split + Tárhely main-nav promotion; also migrate the remaining native `confirm()` dialogs to the
+> type-to-confirm overlay and finish badge→tag markup on secondary pages). NOT live-validated: setup
+> wizard visuals (unit-only), warn/crit meters on real hardware (demo healthy).
 
 > **2026-07-01 — v0.95.0 (deployed on 9201): Impl-2b — raw-drive enrollment wizards.** Both enrollment
 > wizards (`storage_init.html` / `storage_attach.html`) now fetch candidates from the agent's raw-device