Add HMAC restore-by-host for phone-less rebind; resolve gateway at request time and recreate web after stack up.
Co-authored-by: Cursor <cursoragent@cursor.com>
Ship start/restart/pull-and-restart and deploy lib so production can one-line update; git_pull_hard uses checkout -f, restart --pull aligns then restarts.