Improve portable launch, forge persistence, and operator auth UX.

Persist build extra_files for Build Manager history, print dashboard login on every start, add libp2p for Mesh P2P forge, defer WebSocket until login, and split devrun.bat from LAUNCH.bat with USB deck auto-detection.

server/web/src/api/client.test.ts

@@ -263,6 +263,16 @@ describe('api client', () => {
     expect(JSON.parse(lastFetch().init.body as string)).toEqual({ username: 'alice', password: 'secret' });
   });
 
+  it('rotateFleetSecret POSTs rotate endpoint', async () => {
+    fetchMock.mockResolvedValueOnce(jsonResponse({ ok: true, hint: 'abcd1234...' }));
+
+    const res = await api.rotateFleetSecret();
+
+    expect(res.ok).toBe(true);
+    expect(lastFetch().url).toBe('/api/v1/server/rotate-secret');
+    expect(lastFetch().init.method).toBe('POST');
+  });
+
   it('getXmrPrice and getServerInfo', async () => {
     fetchMock
       .mockResolvedValueOnce(jsonResponse({ usd: 200, updated_at: 'now' }))