fix: second-wave bug fixes, security hardening, visual polish, UX improvements

Bug fixes:
- SRV-B1 through B5: server config, router, server_info, syscheck corrections
- BA-03 through BA-06: builder path and universal build cleanup (BLD-D1 through D3)
- Frontend WS race condition and useVisibleInterval hook fixed
- Drive-root path bug in PathForge resolved
- Upload error handling improved

Security:
- PathForge path traversal guard added
- Script injection escaping applied throughout

Visual (DV-01 through DV-15):
- Cyan design tokens and page headers standardised
- Dead CSS removed from Pages.css, PathTracerPage.css, wealth-deck.css
- SacredPageHeader deleted (replaced inline); sidebar version display fixed

UX:
- Emberwake request storm fixed (EmberwakePage.tsx)
- Help blurbs UH-01, UH-02, UH-06 added
- HelpTips wired into Crucible, Fleet (FleetGroupsStrip, FleetToolbar), Settings

Build:
- vite.config.ts: webroot auto-sync on build
- build_universal.go: universal build artifact cleanup
- PROBLEMS.md tracking updated

server/web/src/pages/EmberwakePage.tsx

@@ -66,6 +66,14 @@ export default function EmberwakePage() {
 
   const pinned = useMemo(() => builds.filter((b) => b.pinned), [builds]);
 
+  // Keep refs so `load` can read current pin values without listing them as deps.
+  // Listing pinA/pinB as deps caused a cascade: load() → setPinA/setPinB →
+  // re-render → new load reference → useEffect fires load() again (×N).
+  const pinARef = useRef(pinA);
+  const pinBRef = useRef(pinB);
+  pinARef.current = pinA;
+  pinBRef.current = pinB;
+
   const loadWarRoom = useCallback(async () => {
     try {
       const data = await api.getWarRoom(WAR_ROOM_DAYS);
@@ -91,15 +99,15 @@ export default function EmberwakePage() {
     setNotes(n.content);
     setNotesMeta(n.updated_by ? `${n.updated_by} · ${n.updated_at}` : '');
     void loadWarRoom().catch(() => {});
-    if (!pinA) {
+    if (!pinARef.current) {
       const p = b.find((x) => x.pinned);
       if (p) setPinA(p.id);
     }
-    if (!pinB && b.length > 1) {
+    if (!pinBRef.current && b.length > 1) {
       const alt = b.find((x) => !x.pinned) ?? b[1];
       if (alt) setPinB(alt.id);
     }
-  }, [pinA, pinB, loadWarRoom]);
+  }, [loadWarRoom]);
 
   useEffect(() => {
     void load().catch(() => {});