74d493cd12
A.2: headers emitted from the panel, not reverse-proxy — keep proxy config minimal and hard to break, push complexity into the service. A.5: keep stdout as the base setup-link delivery per spec; document the /data/setup-token file as a more secure alternative for centralized-logging setups.