v0.308.0 (R-554, held-back-able): recovery-info.txt points at the dashboard's Restore page and the recovery code; the first-boot setup wizard is deleted

Operator ruling 2026-10-12 (S27, 09 §3 decision 222). The operator approves the Hungarian text before
release. A box whose first ingestion failed now serves one bilingual waiting page and retries every
minute instead of the wizard. Own commit so the lead can hold it back.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/scripts/mojibake_gate.py

@@ -7,7 +7,7 @@ to the signature characters below, so any hit is a defect. The allowlist is ZERO
 design — fix the text, don't allowlist it. (Windows grep false-negatives multibyte —
 this gate is Python by the multibyte rule, like emoji_gate.)
 
-Scans every template (web + setup) and every Go source file:
+Scans every template (web) and every Go source file:
   - the file must decode as strict UTF-8 (undecodable bytes = broken already), and
   - the decoded text must contain none of the double-encoding signature characters:
       Ã (U+00C3)  Â (U+00C2)  Ă (U+0102)  ă (U+0103)  ˘ (U+02D8)  ˇ (U+02C7)
@@ -19,7 +19,6 @@ import io, os, sys
 
 ROOTS = [
     os.path.join("internal", "web", "templates"),
-    os.path.join("internal", "setup", "templates"),
     "internal",  # every .go string literal / comment
     "cmd",
 ]