Rebrand HydraProxy tier -> Mobile (stop leaking upstream supplier)

Customer-facing site no longer names the upstream broker. Rename:
- nav + page: HydraProxy -> Mobile, /hydraproxy -> /mobile
- hydraproxy.html -> mobile.html, all 'brokered/HydraProxy' copy reworded to
  owned 'Clean Proxys' language
- dashboard: 'HydraProxy orders (broker-fulfilled)' -> 'Mobile orders'
- admin panel keeps upstream names (internal only, drjones needs them)

app.py

@@ -549,11 +549,11 @@ def poll_provisioning():
     return ok, failed
 
 
-# ---------- HydraProxy provider (management-only, manual broker fulfillment) ----------
+# ---------- Mobile proxy tier (4G carrier / static mobile — manually fulfilled) ----------
 HYDRA_PRODUCTS = CFG.get("hydraproxy", {}).get("products", {})
 
 
-@app.route("/hydraproxy")
+@app.route("/mobile")
 def hydraproxy_page():
     account = None
     err = None
@@ -561,7 +561,7 @@ def hydraproxy_page():
         account = hydraproxy.get_account_info()
     except Exception as e:
         err = str(e)
-    return render_template("hydraproxy.html", products=HYDRA_PRODUCTS,
+    return render_template("mobile.html", products=HYDRA_PRODUCTS,
                            account=account, err=err, user=current_user())
 
 
@@ -576,7 +576,7 @@ def api_hydraproxy_info():
         return jsonify({"error": str(e)}), 502
 
 
-@app.route("/hydraproxy/order", methods=["POST"])
+@app.route("/mobile/order", methods=["POST"])
 @login_required
 def hydraproxy_order():
     u = current_user()
@@ -596,7 +596,7 @@ def hydraproxy_order():
     d.commit()
     d.close()
     db.add_transaction(u["id"], -price, "hydraproxy", product)
-    flash("Order placed — our broker fulfills it shortly and delivers your proxy to the dashboard.", "ok")
+    flash("Order placed — your proxy is provisioned shortly and delivered to the dashboard.", "ok")
     return redirect(url_for("dashboard"))