controller: drill F-11 — inline two-step confirm (felhomConfirm + data-confirm) replaces every native confirm(); native_confirm_gate.py enforces zero; stale-data delete keeps its double acknowledgement inline

Claude-Session: https://claude.ai/code/session_01GzammAMzsJTgpQHqxwM2bC

controller/README.md

@@ -119,9 +119,13 @@ backups, monitoring and notifications. All Proxmox/disk operations are delegated
   **unified drive view**: server-rendered registry cards enriched in place from the agent `/api/disks`
   (role/durable-id/actions, joined on mount path), plus read-only **Rendszermeghajtók** and
   **Nem regisztrált meghajtók** groups; agent-down degrades to a single warn note. Consequential
-  actions use an in-page `.confirm-overlay` (`openDialog`), never native `confirm()`/`prompt()`.
+  actions use an in-page `.confirm-overlay` (`openDialog`) or the LIGHT inline two-step
+  (`felhomConfirm` in layout.html, v0.123.0: the trigger swaps in place to "kérdés + Igen/Mégse";
+  form buttons opt in via `data-confirm="…"`) — never native `confirm()`/`prompt()` (OS-modals
+  freeze browser automation; drill F-11).
   **Enforcement:** `scripts/template_id_gate.py` (JS element-ID integrity) + `scripts/emoji_gate.py`
-  (no emoji — run after any template change; the Go `TestNoEmojiInTemplates` mirrors it).
+  (no emoji) + `scripts/native_confirm_gate.py` (zero native confirm/prompt) — run after any
+  template change; the Go `TestNoEmojiInTemplates` mirrors the emoji gate.
 - **Europe/Budapest timezone** — All scheduled jobs, timestamps, and UI labels use Hungarian timezone.
 
 ### Module Map