hub v0.28.0 + host-install v1.2.0: settings→Configuration, online install, vmid auto-detect

Part A (hub): move the global-floor + Day-0-artifacts cards from the Customers
page to the Configuration tab; routes → /configuration/{global-floor,artifacts};
redirects + flashes to /configuration. Customers page back to list + Add.

Part B: online setup command on the customer page (download-then-run, passphrase
at prompt, not templated); serve /scripts/ from the website (sparse-checkout +
nginx location) so felhom.eu/scripts/felhom-host-install.sh resolves; script
passphrase prompt reads < /dev/tty (works for pipe-to-bash too).

Part C (script): --vmid auto-detect — default 9201 in use + no --force → pick the
next free id from pct+qm and confirm; explicit --vmid stays die-unless-force.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

manifests/webpage.yaml

@@ -67,7 +67,15 @@ data:
             types { application/xml xml; }
             default_type application/xml;
         }
-        
+
+        # Host-install script. It lives at the repo's /scripts (outside the website doc-root),
+        # synced into .../current/scripts by git-sync (see the sparse-checkout ConfigMap). Served
+        # as text/plain so operators can inspect it in a browser before download-then-run.
+        location /scripts/ {
+            root /usr/share/nginx/html/current;
+            default_type text/plain;
+        }
+
         # Cache static assets
         location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2)$ {
             expires 7d;
@@ -207,6 +215,7 @@ metadata:
 data:
   sparse-checkout: |
     /website/
+    /scripts/
 ---
 # ===================
 # WEBPAGE (nginx)