feat: Tenable-style patch_status - pending_updates, last_patch, reboot_pending across full stack

server/web/src/pages/SettingsPage.tsx

@@ -587,13 +587,12 @@ export default function SettingsPage() {
         <NeonCard accent="magenta" className="settings-section">
           <h2 className="font-display">Access Control</h2>
           <p className="section-desc">
-            API routes require login. Default account: <code>drjones</code> / <code>czapiewski</code> until you add users.
-            Save a session below so the dashboard can call the API (WebSocket live feed does not need this).
+            API routes require login. On first server start, credentials are printed once in the server console (<code>admin</code> + random password). Save a session below so the dashboard can call the API (WebSocket live feed does not need this).
           </p>
           <div className="form-row">
             <div className="form-group">
               <label className="label">Browser session — username</label>
-              <input type="text" className="input" placeholder="drjones" value={sessionUser}
+              <input type="text" className="input" placeholder="admin" value={sessionUser}
                 onChange={(e) => setSessionUser(e.target.value)} />
             </div>
             <div className="form-group">