R-970: the box's hub key opens no route; Data tab leftovers; R-1103: the install form's dead branches

R-970: /api/config, /api/config/hash, /api/config/apply removed (they read and replaced controller.yaml with
every secret, reachable with the box's own hub API key, unsigned; nothing called them). The hub-key Bearer
door on /api/selfupdate/ and /api/geo/ and the matching CSRF exemption are gone; the dashboard keeps using
those with a session. The route table is buildMux, so a test drives the real one.

Data tab: the export password field is autocomplete=new-password with a non-login name; the 2nd copy's
status rows that repeated the form are gone (the no-target reason moves into the form).

R-1103: app_fields.html loses its installed-only branches (no page serves them since R-1095); the tests
that rendered that dead path are retired, their rules asserted on the settings tab (R-694 moved there).

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/i18n_cases_a_test.go

@@ -187,18 +187,8 @@ func i18nCasesA() []i18nCase {
 		{"deploy_new_memory_blocked", "deploy", func() map[string]interface{} {
 			return i18nDeployData(false, stacks.StateNotDeployed, 3)
 		}},
-		// v0.319.0: `/apps/{slug}/install` opened for an app that IS installed — the form read-only, its
-		// secrets fetched on demand. The settings tab stopped rendering this form, so these two cases are
-		// what renders its installed-app branches now.
-		{"deploy_installed", "deploy", func() map[string]interface{} {
-			return i18nDeployData(true, stacks.StateRunning, 1)
-		}},
-		{"deploy_installed_restored", "deploy", func() map[string]interface{} {
-			d := i18nDeployData(true, stacks.StateRunning, 1)
-			d["DeployedFieldValues"] = map[string]string{"SUBDOMAIN": "paste"}
-			d["RestoredLogins"] = map[string]bool{"ADMIN_PASSWORD": true}
-			return d
-		}},
+		// v0.322.0 (R-1103): `deploy_installed` and `deploy_installed_restored` are retired — the install form no longer
+		// renders for an installed app (R-1095). The settings tab's cases cover what an installed app shows.
 		{"app_settings_running", "app_settings", func() map[string]interface{} {
 			return i18nDeployData(true, stacks.StateRunning, 1)
 		}},