hub v0.28.0 + host-install v1.2.0: settings→Configuration, online install, vmid auto-detect

Part A (hub): move the global-floor + Day-0-artifacts cards from the Customers
page to the Configuration tab; routes → /configuration/{global-floor,artifacts};
redirects + flashes to /configuration. Customers page back to list + Add.

Part B: online setup command on the customer page (download-then-run, passphrase
at prompt, not templated); serve /scripts/ from the website (sparse-checkout +
nginx location) so felhom.eu/scripts/felhom-host-install.sh resolves; script
passphrase prompt reads < /dev/tty (works for pipe-to-bash too).

Part C (script): --vmid auto-detect — default 9201 in use + no --force → pick the
next free id from pct+qm and confirm; explicit --vmid stays die-unless-force.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

scripts/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Felhom scripts — Changelog
 
+## felhom-host-install.sh v1.2.0 — /dev/tty passphrase read + vmid auto-detect (2026-07-01)
+
+Two operator-experience fixes so a colleague can install online (via the hub's new "Option 1: Online
+install" one-liner) and onto a host that already runs a guest at 9201.
+
+- **Passphrase prompt reads from `/dev/tty`, not stdin** (`read_passphrase`). `read -rsp … < /dev/tty`
+  makes the no-echo prompt work regardless of how stdin is wired — both download-then-run **and**
+  `curl … | sudo bash` (where stdin is the pipe). Strictly more correct; the `--passphrase-file` path is
+  unchanged. The passphrase is still never on argv / in logs / in the state file.
+- **VMID auto-detect (`--vmid` now optional-smart).** New `VMID_EXPLICIT` flag (set by `--vmid`). The
+  pre-flight vmid guard now determines "in use" against the **`pct list` + `qm list`** id-set (LXC and
+  VMs share the id space — more complete than the old `pct status`, which only knew LXC):
+  - **explicit `--vmid`** → unchanged deterministic behavior: die if the id is in use unless `--force`
+    (destructive over-provision).
+  - **default 9201, in use, no `--force`** → **auto-pick the next free id** (scan upward from 9201 over
+    the used-set) and **ask to confirm** from the terminal (`read … < /dev/tty`, `[y/N]`); proceed on
+    yes, `die "no free vmid confirmed"` otherwise. Never a silent auto-pick.
+  - **default 9201 + `--force`** → over-provision 9201 (destructive) without prompting, as before.
+  - New helpers `used_vmids` / `_vmid_in_use` / `next_free_vmid`. `--vmid` help text + `usage()` updated.
+
 ## felhom-host-install.sh v1.1.0 — self-install the agent + fetch the golden from Gitea (2026-06-28)
 
 The script now **installs the agent itself** (the last big manual Day-0 prerequisite is gone). It