critical UI fix: page bodies were HTML-escaping (Markup wrap) — all 17 pages now render as real UI

app.py

@@ -308,7 +308,8 @@ def page(sec, body):
                     ("★ PASS · " if pas else "") + "$" + f"{bal/100:.2f}" + " · " + esc(u["username"]) + "</a>")
         except Exception:
             acct = ""
-    return render_template_string(BASE, body=body, bmac=BMAC, o=lambda s: "on" if s == sec else "",
+    from markupsafe import Markup
+    return render_template_string(BASE, body=Markup(body), bmac=BMAC, o=lambda s: "on" if s == sec else "",
                                   n1=n1, n2=n2, acct=acct)
 
 def how(steps):