c50bd55392
3.1 banner retired (0 occurrences) + card present; 3.2 /api/storage/activate 404, /api/server/reboot wrapped RequireAuth+CsrfProtect (auth-gate not demonstrable on passwordless demo). Committing before the 3.3 live guest reboot (guardrail 8). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_017PsnU2ASocYrvzqE82YDYW