Verify the administrator console through its production service

[SaladDay]

Connect the operations-console acceptance suite to the production core-console service, so browser checks exercise real account authentication, cookies, origin checks and the management proxy. The synthetic fixture represents only Core responses. Keep the frontend scenarios and add proxy isolation, failed-read, unknown-metric and one-time-key checks. Update onboarding documentation to the available Project and Nodes screens.

This PR is stacked on #96 and does not modify its production frontend components. Public /v1 contracts are unchanged. The backend task deployed Core/Web/PostgreSQL on mx2 and authenticated Docker execution nodes on mx, mx1 and mx2. CLUSTER-CONSOLE-001 on the task board tracks deployment evidence and outstanding items.

Validation:

• Candidate 35183f8: make check-web passed, including 61 core-doctor, 592 client and 328 Web tests, and 12 production-console browser cases. Browser fixtures cover the real console server with a synthetic Core upstream.
• Separate actual-cluster acceptance: 13 console pages, real Core metrics, three ready nodes, Project/admin credential isolation, and real Kimi K3 execution with Codex, Claude Code and MiniMax Code passed. Each consumed template File/Skill input and produced a verified persisted report. Missing usage remains null.
• Web-only rollout preserved Core/DB container identities, installation/node-payload checksums and node IDs. Actual browser checks and existing Session/Files/Artifacts verification passed again after reconnect.
• The first full make check failed at TestEnvironmentInputActivityRecoversWaitingActionAndHidesDeletion with an execution-ownership error. Targeted runs passed ten times on both main and candidate; this does not establish a reproduced baseline failure. Remaining gates passed separately, and the full store package passed its bounded rerun (294.744 seconds). The original failed result is preserved; this is not claimed as a single clean full-gate run.
• Astra high independent review completed. Redesign Core Web as an operations console #96's project-list failure/retry finding remains assigned to its frontend owner. The integrated change must not merge into main until blockers are resolved.

Deployment is an explicitly recorded test installation: Core/Runtime a7ebbe7 plus Web 35183f8. Runtime images were preloaded and verified; this is not a cold-download speed benchmark, an HA deployment, or a released installer upgrade.