Auth page: pure-PHP Authelia ACL parser, NPM-sourced certs tab, watchdog JS fixes, rsync settings layout

- Replace python3/PyYAML Authelia ACL parser with pure PHP (no deps available on Unraid)
- Cert tab now pulls live from NPM API instead of cert_monitor.sh — auto-discovers all managed certs sorted by urgency
- Watchdog page: add missing GB constant and _fmtBytes/_relTime functions that were causing silent render failure
- Rsync settings card: pin to far-right 3 columns (grid-column:6/-1), toggle grid narrowed to 2 columns
- Add CLAUDE.md project context file on /boot for session persistence across reboots
- claude_startup.sh: symlink CLAUDE.md into /root on array start

Tools/claude_startup.sh

@@ -87,6 +87,17 @@ _log ".claude        → $CLAUDE_DATA"
 ln -sfn "$CLAUDE_BIN" /root/.local/share/claude
 _log "claude binary  → $CLAUDE_BIN"
 
+# ── Symlink CLAUDE.md ─────────────────────────────────────────────────────────────────────────
+# Lives on /boot so it survives reboots without appdata. Symlinked into /root so Claude
+# picks it up automatically from the working directory on every session.
+CLAUDE_MD="/boot/config/plugins/varaverk/CLAUDE.md"
+if [[ -f "$CLAUDE_MD" ]]; then
+    ln -sfn "$CLAUDE_MD" /root/CLAUDE.md
+    _log "CLAUDE.md      → $CLAUDE_MD"
+else
+    _warn "CLAUDE.md not found at $CLAUDE_MD — skipping symlink"
+fi
+
 # ── Point the claude binary at the latest installed version ───────────────────────────────────
 LATEST=$(ls "$CLAUDE_BIN/versions/" 2>/dev/null | sort -V | tail -1)
 if [[ -z "$LATEST" ]]; then