Multi-host phase 1: API tokens, auto TLS with pinned fingerprints, hub-side node manager + reverse proxy (WebSockets included), machine switcher in the rail, Machines page

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

web/src/App.tsx

@@ -7,7 +7,7 @@ export default function App() {
   const [me, setMe] = useState<Me | null | undefined>(undefined)
 
   const refresh = useCallback(async () => {
-    try { setMe(await api.me()) } catch (e) { if (e instanceof Unauthenticated) setMe(null) }
+    try { setMe(await api.meHere()) } catch (e) { if (e instanceof Unauthenticated) setMe(null) }
   }, [])
 
   useEffect(() => { refresh() }, [refresh])