feat: add system config import, refactor install script and nginx auth

- lib/system_import: new module to import system configs into JSON at daemon startup
- daemon/server.py: call import_all() during startup for config reconciliation
- daemon/handlers/nginx.py: simplify add_domain auth handling, remove duplicate code
- scripts/install.sh: replace inline Python setup with curl-based daemon API calls; apply IP forwarding at runtime
- hoover: bump internal asset versions to v=8
- pages: bump asset versions to v=9

webui/static/app.js

@@ -1,16 +1,16 @@
-import { h, render, Link, hComp, ToastContainer, connect, apiFetch, modelRegister, modelFetch, reactive } from '/static/hoover/index.js?v=9';
+import { h, render, Link, hComp, ToastContainer, connect, apiFetch, modelRegister, modelFetch, reactive } from '/static/hoover/index.js?v=8';
 
-import DashboardPage from '/static/pages/dashboard.js?v=8';
-import InterfacesPage from '/static/pages/interfaces.js?v=8';
-import ZonesPage from '/static/pages/zones.js?v=8';
-import RulesPage from '/static/pages/rules.js?v=8';
-import NatPage from '/static/pages/nat.js?v=8';
-import DhcpPage from '/static/pages/dhcp.js?v=8';
-import ProxyPage from '/static/pages/proxy.js?v=8';
-import CertsPage from '/static/pages/certs.js?v=8';
-import WireguardPage from '/static/pages/wireguard.js?v=8';
-import LogsPage from '/static/pages/logs.js?v=8';
-import NotFoundPage from '/static/pages/notfound.js?v=8';
+import DashboardPage from '/static/pages/dashboard.js?v=9';
+import InterfacesPage from '/static/pages/interfaces.js?v=9';
+import ZonesPage from '/static/pages/zones.js?v=9';
+import RulesPage from '/static/pages/rules.js?v=9';
+import NatPage from '/static/pages/nat.js?v=9';
+import DhcpPage from '/static/pages/dhcp.js?v=9';
+import ProxyPage from '/static/pages/proxy.js?v=9';
+import CertsPage from '/static/pages/certs.js?v=9';
+import WireguardPage from '/static/pages/wireguard.js?v=9';
+import LogsPage from '/static/pages/logs.js?v=9';
+import NotFoundPage from '/static/pages/notfound.js?v=9';
 
 /* ── Navigation items ──────────────────────────────────────── */
 const Nav = [

webui/static/hoover/component.js

@@ -15,9 +15,9 @@
  *   });
  */
 
-import { reactive } from './reactivity.js?v=7';
-import { h } from './vdom.js?v=7';
-import { _compExpandedCache } from './render.js?v=7';
+import { reactive } from './reactivity.js?v=8';
+import { h } from './vdom.js?v=8';
+import { _compExpandedCache } from './render.js?v=8';
 
 /** Registry of mounted components: key → { state } */
 const _mounted = new Map();

webui/static/hoover/components/layout.js

@@ -4,9 +4,9 @@
  * Layout components: PageHeader, Tabs, SectionTitle, DataTableSection, ActionGroup.
  */
 
-import { h } from '../vdom.js?v=7';
-import { Table } from './data.js?v=7';
-import { collectLoadingModels } from '../model.js?v=7';
+import { h } from '../vdom.js?v=8';
+import { Table } from './data.js?v=8';
+import { collectLoadingModels } from '../model.js?v=8';
 
 /**
  * Page header with title, optional subtitle, and action buttons.

webui/static/hoover/html.js

@@ -1,4 +1,4 @@
 import htm from '../../vendor/htm.js';
-import { htmAdapter } from './vdom.js?v=7';
+import { htmAdapter } from './vdom.js?v=8';
 
 export const html = htm.bind(htmAdapter);

webui/static/hoover/model.js

@@ -13,7 +13,7 @@
  *   collectLoadingModels(...models) — combine loading/refreshing/error
  */
 
-import { reactive } from './reactivity.js?v=7';
+import { reactive } from './reactivity.js?v=8';
 
 /** Registered models: name → { model, subsystem, fetch } */
 const _models = new Map();

webui/static/hoover/render.js

@@ -5,12 +5,12 @@
  * batched re-render loop integration with reactivity.js.
  */
 
-import { requestUpdate, setCommitFn } from './reactivity.js?v=7';
+import { requestUpdate, setCommitFn } from './reactivity.js?v=8';
 import {
     _vnodeDom, createDom, getDom, patchNode, sweepDom,
     setMountFn, setUnmountFn,
-} from './vdom.js?v=7';
-import { mountComponent, unmountComponent } from './component.js?v=7';
+} from './vdom.js?v=8';
+import { mountComponent, unmountComponent } from './component.js?v=8';
 
 /** Container → previous root vnodes */
 export const _renderSlots = new Map();

webui/static/hoover/router.js

@@ -5,8 +5,8 @@
  * navigation).  Link component for client-side navigation.
  */
 
-import { reactive } from './reactivity.js?v=7';
-import { h } from './vdom.js?v=7';
+import { reactive } from './reactivity.js?v=8';
+import { h } from './vdom.js?v=8';
 
 /**
  * Hash-based router.

webui/static/hoover/websocket.js

@@ -6,7 +6,7 @@
  * Page-level subscribe/unsubscribe is replaced by the model layer.
  */
 
-import { refreshByTopic } from './model.js?v=7';
+import { refreshByTopic } from './model.js?v=8';
 
 let _wsConn = null;
 let _wsReconnectMs = 0;