v0.321.0: FileBrowser's stale password and its own banners; one backup section on the Data tab; install address of an installed app

R-1101: the change-it line is gone for FileBrowser; in the generated state the page asks FileBrowser whether
the stored password still logs in (only its own 401/403 counts) and, refused, says so and offers the
new-password press. The rendered FileBrowser config switches off its update notice and its Install-app
prompt. The Data tab's backup part is one section in plain words (no off-drive, no PBS); the export
password eye is a text button. R-1095: /apps/{slug}/install of an installed app 302s to its settings tab.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

CHANGELOG.md

@@ -1,3 +1,34 @@
+## v0.321.0 — FileBrowser's stale password and its own banners, one backup section on the Data tab, the install address of an installed app (2026-10-16)
+
+**MinAgent: 0.158.1** — the floor's, carried from v0.320.0. Nothing here calls the agent. No golden (`09` §3 decision
+250). Task: the apps burndown (felhom.eu `REPORT-burndown-apps-2026-10-16.md`).
+
+- **R-1101 — FileBrowser's stored password goes stale.** The page told the household to change the password after the
+  first login, and then showed the old one. The line is gone for FileBrowser. In the `generated` state the box now asks
+  FileBrowser first (`stacks.FileBrowserStoredPasswordRefused`, once per page load, 3 s bound, the value never logged):
+  only FileBrowser's own 401/403 counts as refused — a FileBrowser that does not answer is not. Refused → „A
+  Fájlkezelőben megváltoztattad a jelszót, ezért a doboz már nem ismeri." and „Új jelszó beállítása", which the reset
+  now accepts in that case too.
+- **FileBrowser's own banners:** the rendered config sets `server.disableUpdateCheck: true` (no „An update is
+  available!" — the box updates FileBrowser) and `frontend.disablePWAInstall: true` (no „Install app"). Both read at
+  `gtstef/filebrowser:1.5.6-stable` (`backend/common/settings/structs.go:51`, `:294`). The config changes once, so
+  each box recreates FileBrowser once after the update.
+- **The Data tab's backup part is ONE section** „Biztonsági mentés": an „Éjszakai mentés" row with „Mentési állapot →",
+  the 2nd copy's state as rows (plain text, not monospace, not a two-column grid), what it means, its form. Plain words:
+  no „off-drive", no „PBS", no „DB/konfiguráció". The „Mentési beállítások →" link (it pointed at the same tab) is
+  gone. The export password toggle is the text „Megjelenítés"/„Elrejtés" with an `aria-label`, like every other reveal
+  button (it was an eye emoji).
+- **R-1095 — `/apps/{slug}/install` of an INSTALLED app** answers 302 to its settings tab (GET only). The installed-only
+  branches of `app_fields.html` stay: the R-254/R-709 guard tests pin them (filed, R-1103).
+- Changed keys (hu + en): `tier2_config.a_2_mentes_egy_masik`, `.csak_db_konfiguracio`, `.jelenleg_csak_a_belso_ssd`,
+  `.nincs_elerheto_off_drive_cel`, `.nincs_masik_adatmeghajto_automatikus_cel`, `.rendszerlemez.vedett`,
+  `note.tier2.no_space_ssd`, `note.tier2.reason_no_second` (the last two moved to the go-parity map's reworded list).
+  New: `app_page.backup_nightly`, `.backup_nightly_text`, `.backup_status_link`, `.fb_password_changed`.
+- Tests red-proved: `TestFileBrowserStoredPassword_RefusedOnlyOnA401`, `TestFileBrowserLogin_StoredPasswordRefusedOffersReset`,
+  `TestAppData_OneBackupSection`, `TestInstallAddress_InstalledRedirectsToSettings`. Parity fixtures: 13 re-captured
+  (the Data tab's ten, `app_settings_deployed`, `app_settings_operator_creds`, `app_settings_infra_filebrowser`); 1 new
+  (`app_settings_infra_filebrowser_stale`). Every other fixture, the install page's included, byte-identical.
+
 ## v0.320.0 — FileBrowser is part of the box again, every app says where its login is, a „Fájlok" button (2026-10-16)
 
 **MinAgent: 0.158.1** — the floor's, carried from v0.319.0. Nothing here calls the agent. No golden (`09` §3 decision