fix: dashboard funnel crash, comrade user, Cloudflare tunnel auto-start

Add runtime comrade account, null-safe spread funnel API/UI, server-started
cloudflared connector with Calibrate token field and builtin fallback, and
simplify LAUNCH to delegate tunnel startup to AetherForge.

server/web/src/components/Fleet/FleetOpsWidgets.tsx

@@ -46,6 +46,7 @@ export function SpreadFunnelWidget() {
   }, []);
 
   if (!stats) return null;
+  const byBuild = stats.by_build ?? [];
 
   return (
     <NeonCard accent="cyan" tilt3d={false}>
@@ -55,7 +56,7 @@ export function SpreadFunnelWidget() {
         <span>New today: <strong>{stats.new_connects_today}</strong></span>
         <span>Fleet total: <strong>{stats.total_agents}</strong></span>
       </div>
-      {stats.by_build.length === 0 ? (
+      {byBuild.length === 0 ? (
         <p style={{ color: 'var(--clr-dim)', fontSize: '0.85rem' }}>No agents in the last 7 days.</p>
       ) : (
         <table style={{ width: '100%', fontSize: '0.75rem', borderCollapse: 'collapse' }}>
@@ -65,7 +66,7 @@ export function SpreadFunnelWidget() {
             </tr>
           </thead>
           <tbody>
-            {stats.by_build.slice(0, 10).map((r, i) => (
+            {byBuild.slice(0, 10).map((r, i) => (
               <tr key={i} style={{ borderTop: '1px solid #222' }}>
                 <td className="mono">{r.build_id.slice(0, 12)}{r.build_id.length > 12 ? '…' : ''}</td>
                 <td>{r.worker_name}</td>