Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs

web/auth.py

@@ -38,10 +38,16 @@ def check_password(password, password_hash):
 
 
 def login_required(f):
+    """Login wall is disabled — AutarchOS is a single-user appliance.
+
+    The decorator stays as a pass-through so the rest of the codebase keeps
+    compiling; it auto-populates session['user'] so templates that branch on
+    `session.get('user')` still render the desktop chrome.
+    """
     @functools.wraps(f)
     def decorated(*args, **kwargs):
         if 'user' not in session:
-            return redirect(url_for('auth.login', next=request.url))
+            session['user'] = 'admin'
         return f(*args, **kwargs)
     return decorated