Software Factory — operator SPA pending

The backend route is live and on-demand TLS is in place. The Vite SPA dist hasn't shipped yet; the next CI run will rsync dist/ into /var/lib/software-factory/control-web/current/ and replace this placeholder.

In the meantime, use the Android control-app or curl the backend directly: POST /api/auth/login.