v0.319.0: the app page in panels, the login in one place, a password the box never had is said in words

- style A (operator 2026-10-16): hero, tab bar and every section are panels on --bg-1, one width, 16px apart;
  the install page's form groups use the same rule; the settings tab's 700px inner wrapper is gone
- „Belépés az alkalmazásba": name + password side by side, fetched on demand (R-254, R-709); pairing in app_login.go
- the empty-value rule: no stored value -> a sentence, never an eye; page and reveal endpoint share storedValuePresent
- „Cím és kulcsok" is rows (no Domain input, no disabled storage select, no install form); hint under the title
- tests red-proved: app_page_tuning_test.go (4); 36 app-page parity fixtures re-captured, 4 new; install fixtures unchanged

Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb

CHANGELOG.md

@@ -1,3 +1,34 @@
+## v0.319.0 — the app page in panels, the login in one place, a password the box never had is said in words (2026-10-16)
+
+**MinAgent: 0.157.0** — unchanged; nothing here calls the agent. No golden (`09` §3 decision 250). Design: felhom.eu
+`architecture/02-controller-module-map.md` „The app page" (`[DESIGN]`, operator-approved 2026-10-16, section style A).
+
+- **Panels (style A).** The hero, the tab bar and every section of the four tabs are panels on `--bg-1`, the column's
+  full width, 16px apart; the open tab is filled `--bg-2` with a 2px `--blue-bright` underline; a panel's title sits 18px
+  from its top edge with a soft rule under it. The install page's form groups and its progress panel use the same rule.
+  The settings tab's inner 700px wrapper is gone (it made the settings panels narrower than the column).
+- **„Belépés az alkalmazásba"** — one panel with the app's login name and password side by side (stacked under 720px),
+  both fetched on demand as before (R-254, R-709). Pairing: a `type: password` field plus the `secret` or `text` field with
+  the same prefix and `USER`/`USERNAME`/`EMAIL` (`web/app_login.go`). Pairs today: calibre-web, kimai, lubelogger,
+  nextcloud, paperless-ngx, radicale; the other 14 password apps show the password alone.
+- **The empty-value rule.** A login field the box holds no value for is a sentence („A doboz ennél a telepítésnél nem
+  mentett jelszót…"), never an eye that answers 404. The page and the reveal endpoint decide „stored" with one function
+  (`storedValuePresent`). Measured cause on demo-hp: Calibre-Web was installed 2026-08-21, its template gained
+  `ADMIN_PASSWORD` on 2026-09-29, and `InjectMissingFields` never fills a `type: password` field
+  (felhom.eu `audits/app-page-tuning-2026-10-16/P0`). Its stored user name is the real one (renamed in the app 2026-10-01).
+- **„Cím és kulcsok"** — the settings tab no longer re-renders the install form: no Domain input, no disabled storage
+  select, no „Automatikusan generált értékek" block. The read-only hint sits under the title; the storage is a row
+  „Tárhely: <név>"; the other install answers and generated keys are rows (keys keep their eye).
+- Guide: the screenshots are a panel that hides itself when no screenshot loads; the missing-guide line is a panel. Data:
+  the export's progress and done boxes are panels. Logs: the log box is one panel.
+- `/apps/{slug}/install` opened for an INSTALLED app still renders the install form read-only with its secret guards;
+  two parity cases now render it (`deploy_installed`, `deploy_installed_restored`).
+- Tests red-proved: `app_page_tuning_test.go` (TestAppPage_LoginPairPanel, _NoStoredValueShowsSentence,
+  _SettingsHasNoDuplicateDomain, _OneSectionStyleEverywhere); the storage-row tests re-targeted from the old select.
+  Parity fixtures: 36 app-page fixtures re-captured (the per-task exception, markup only); 4 new
+  (`app_settings_login_not_stored`, `app_settings_login_text_name`, `deploy_installed`, `deploy_installed_restored`);
+  every install-page fixture and every other fixture byte-identical.
+
 ## v0.318.0 — the internal data place, partitions, an honest whole-box backup offer, sys_drive never offered (2026-10-16)
 
 **MinAgent: 0.157.0** — nothing here calls a new agent endpoint. The internal place and the partitions appear only when the