docs: update API conflict status, ACME config, request flow, deployment, and security sudoers

docs/overview.md

@@ -66,7 +66,8 @@ After installation, access the management interface at `https://<hostname>.local
 │   ├── network/             # systemd-networkd per-interface config
 │   ├── firewall/            # Firewall zone & rule config
 │   ├── nginx/               # Proxy domain & SSL config
-│   └── wireguard/           # VPN interface & peer config
+│   ├── wireguard/           # VPN interface & peer config
+│   └── acme/                # ACME account settings (email, CA provider)
 ├── data/                    # Runtime artifacts & generated files
 │   ├── nginx/sites-enabled/ # Generated server blocks
 │   ├── dnsmasq/fragments/   # User config fragments
@@ -97,8 +98,8 @@ After installation, access the management interface at `https://<hostname>.local
 │   ├── dnsmasq.py           # DHCP/DNS configuration
 │   ├── nginx.py             # Reverse proxy configuration
 │   ├── state.py             # State collector (uses lib.network.parse_networkctl_status)
-│   ├── acme.py              # Certificate management
-│   └── wireguard.py         # VPN tunnel management
+│   ├── acme.py              # Certificate management (ACME helpers)
+│   └── wireguard.py         # VPN tunnel and peer management
 ├── webui/                   # Flask web application
 │   ├── server.py            # Application entry point
 │   ├── api/                 # REST API route modules (blueprints)
@@ -123,6 +124,9 @@ After installation, access the management interface at `https://<hostname>.local
 │       │   ├── helpers.js
 │       │   └── components/  # Layout, data display, modal, toast
 │       └── pages/           # Page modules (each defines a route via definePage)
+├── vendor/                  # Vendored scripts and JS libraries
+│   ├── acme.sh              # ACME certificate client
+│   └── htm.js               # JS tagged-template HTML adapter
 ├── docs/                    # Documentation
 │   ├── overview.md          # This file
 │   ├── deployment.md
@@ -132,7 +136,7 @@ After installation, access the management interface at `https://<hostname>.local
 │   ├── config.md
 │   └── hoover.md            # Hoover SPA framework
 └── scripts/                   # Utility scripts
-    └── update-vendor.sh      # Vendor frontend library updates
+    └── update-vendor.sh      # Download acme.sh binary
 ```
 
 ## Documentation