feat: fleet secret auth - zero-setup agent authentication, dashboard WS token, remove credential hints

server/web/src/components/SessionGate.tsx

@@ -4,7 +4,7 @@ import { getStoredAuth, setStoredAuth } from '../api/auth';
 export default function SessionGate({ children }: { children: ReactNode }) {
   const [ready, setReady] = useState(false);
   const [authed, setAuthed] = useState(!!getStoredAuth());
-  const [user, setUser] = useState('drjones');
+  const [user, setUser] = useState('');
   const [pass, setPass] = useState('');
   const [err, setErr] = useState('');
 
@@ -72,7 +72,6 @@ export default function SessionGate({ children }: { children: ReactNode }) {
           <button type="submit" className="btn btn-primary btn-lg">
             Enter Command Deck
           </button>
-          <p className="form-hint">Default: drjones / czapiewski (change under Calibrate → Users)</p>
         </form>
       </div>
     );