v0.321.0: FileBrowser's stale password and its own banners; one backup section on the Data tab; install address of an installed app

R-1101: the change-it line is gone for FileBrowser; in the generated state the page asks FileBrowser whether
the stored password still logs in (only its own 401/403 counts) and, refused, says so and offers the
new-password press. The rendered FileBrowser config switches off its update notice and its Install-app
prompt. The Data tab's backup part is one section in plain words (no off-drive, no PBS); the export
password eye is a text button. R-1095: /apps/{slug}/install of an installed app 302s to its settings tab.

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/templates/app_settings.html

@@ -169,6 +169,11 @@
                 <td class="initcred-label" style="padding:.25rem .75rem .25rem 0;color:var(--text-3);white-space:nowrap">{{T "common.jelszo"}}</td>
                 <td data-fb-operator="1">{{T "app_page.fb_operator_set"}}</td>
             </tr>
+            {{else if .InitialCredsStale}}
+            <tr>
+                <td class="initcred-label" style="padding:.25rem .75rem .25rem 0;color:var(--text-3);white-space:nowrap">{{T "common.jelszo"}}</td>
+                <td data-fb-stale="1">{{T "app_page.fb_password_changed"}}</td>
+            </tr>
             {{else}}
             <tr>
                 <td class="initcred-label" style="padding:.25rem .75rem .25rem 0;color:var(--text-3);white-space:nowrap;vertical-align:middle">{{T "common.jelszo"}}</td>
@@ -185,8 +190,10 @@
             {{end}}
         </table>
         {{if .InitialCreds.Note}}<p class="app-info-creds-warn">{{.InitialCreds.Note}}</p>{{end}}
-        {{if not .InitialCredsOperatorSet}}<p class="app-info-creds-warn">{{T "app_info.az_elso_bejelentkezes_utan_azonnal"}}</p>{{end}}
-        {{- if .InitialCredsOperatorSet}}
+        {{/* v0.321.0 (R-1101): no „change it after the first login" for FileBrowser — changing it there makes the
+             box's copy stale. The other apps keep the line. */}}
+        {{if and (not .InitialCredsOperatorSet) (not .Infra)}}<p class="app-info-creds-warn">{{T "app_info.az_elso_bejelentkezes_utan_azonnal"}}</p>{{end}}
+        {{- if or .InitialCredsOperatorSet .InitialCredsStale}}
         {{/* v0.320.0: the box does not know this password, so it offers to set a new one (stacks
              ResetFileBrowserAdminPassword — the file browser's own CLI, spiked on demo-hp). POST + CSRF,
              confirmed first: the old password stops working. */}}