PARITY DIFF — controller v0.255.0, against the fixtures at 2e9d402 (v0.254.0)

A real (LCS) diff; the per-session CSRF token is blanked on both sides. Two things change and
nothing else: the stylesheet gains its cache-buster, and the globe moves INSIDE the card.

[7 fixtures] recovery_locked_can.html, recovery_locked_cannot.html, recovery_locked_confirm.html, recovery_unlocked_apps.html, recovery_unlocked_empty.html, recovery_unlocked_unavailable.html, recovery_unlocked_untagged.html
   -    <link rel="stylesheet" href="/static/style.css">
   +    <link rel="stylesheet" href="/static/style.css?v=0.247.0">
   -    <div class="shell-lang"><details class="lang-globe">
   -    <summary class="lang-globe-btn" aria-label="Nyelv" title="Nyelv"><svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"
   -    <ul class="lang-globe-menu">
   -        <li><form method="POST" action="/settings/language"><input type="hidden" name="_csrf" value="CSRF"><input type="hidden" name="back" value="/i18n-fixture"><button type="sub
   -        <li><form method="POST" action="/settings/language"><input type="hidden" name="_csrf" value="CSRF"><input type="hidden" name="back" value="/i18n-fixture"><button type="sub
   -    </ul>
   -</details></div>
   +    <div class="shell-lang"><details class="lang-globe">
   +    <summary class="lang-globe-btn" aria-label="Nyelv" title="Nyelv"><svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"
   +    <ul class="lang-globe-menu">
   +        <li><form method="POST" action="/settings/language"><input type="hidden" name="_csrf" value="CSRF"><input type="hidden" name="back" value="/i18n-fixture"><button type="sub
   +        <li><form method="POST" action="/settings/language"><input type="hidden" name="_csrf" value="CSRF"><input type="hidden" name="back" value="/i18n-fixture"><button type="sub
   +    </ul>
   +</details></div>

[4 fixtures] claim_reset_code.html, claim_reset_nocode.html, claim_setup_code.html, claim_setup_nocode.html
   -    <link rel="stylesheet" href="/static/style.css">
   +    <link rel="stylesheet" href="/static/style.css?v=test">
   -    <div class="shell-lang"><details class="lang-globe">
   -    <summary class="lang-globe-btn" aria-label="Nyelv" title="Nyelv"><svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"
   -    <ul class="lang-globe-menu">
   -        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="hu" lang="hu" class="lang-globe-item
   -        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="en" lang="en" class="lang-globe-item
   -    </ul>
   -</details></div>
   +        <div class="shell-lang"><details class="lang-globe">
   +    <summary class="lang-globe-btn" aria-label="Nyelv" title="Nyelv"><svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"
   +    <ul class="lang-globe-menu">
   +        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="hu" lang="hu" class="lang-globe-item
   +        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="en" lang="en" class="lang-globe-item
   +    </ul>
   +</details></div>

[3 fixtures] launcher_share_password.html, launcher_shared_apps.html, launcher_shared_empty.html
   -    <link rel="stylesheet" href="/static/style.css">
   +    <link rel="stylesheet" href="/static/style.css?v=7da11d7a">

[1 fixtures] login.html
   -    <link rel="stylesheet" href="/static/style.css">
   +    <link rel="stylesheet" href="/static/style.css?v=0.250.0">
   -    <div class="shell-lang"><details class="lang-globe">
   -    <summary class="lang-globe-btn" aria-label="Nyelv" title="Nyelv"><svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"
   -    <ul class="lang-globe-menu">
   -        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="hu" lang="hu" class="lang-globe-item
   -        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="en" lang="en" class="lang-globe-item
   -    </ul>
   -</details></div>
   +        <div class="shell-lang"><details class="lang-globe">
   +    <summary class="lang-globe-btn" aria-label="Nyelv" title="Nyelv"><svg class="ico" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"
   +    <ul class="lang-globe-menu">
   +        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="hu" lang="hu" class="lang-globe-item
   +        <li><form method="POST" action="/lang"><input type="hidden" name="back" value="/i18n-fixture"><button type="submit" name="lang" value="en" lang="en" class="lang-globe-item
   +    </ul>
   +</details></div>

[91 fixtures] IDENTICAL — EVERY dashboard page among them: zero re-captures outside the shells.

DISTINCT CHANGE SHAPES: 4 — the three shells that gained the moved globe AND the buster, and the
two guest share pages, which gained ONLY the buster (they carry no globe) and take an OPAQUE tag
rather than the version: a stranger holding a capability URL is not told which build is running.