Rostdav 0.4.0

Added

• About page (/about, in the navigation under the account entries): version, licence, source code, and the release notes of every version. The notes are CHANGELOG.md compiled into the binary, so they work offline and describe exactly what is running; the running version is marked and open.
• Version check, off by default (ADR 0009): an administrator can switch it on (Administration, Server, "Updates"). Then the server asks the GitHub releases API once a day, and on "Check now", which version is the newest, and shows a newer one with its release notes. The request carries only User-Agent: rostdav/<version>: no user, file or server data. While the check is off, the server makes no outbound connection at all. A failed check is shown on the page and never affects serving files. This adds an HTTPS client (ureq, rustls, bundled root certificates) to the program.
• Installing an update from the web interface, for a plain binary only (a container image shows the steps to pull the new image). The administrator confirms with their password; the server downloads the release file from GitHub, checks its minisign signature against a key compiled into the program, runs it with --version, saves the database to backups/before-<version>.sqlite, keeps the old program as rostdav.previous, replaces its program file and exits with status 75 for the supervisor to restart it. It stays off until a signing key is built in. Releases now also carry the bare binaries (rostdav-<version>-<target>) with minisign signatures (ADR 0009).
• Documentation site with a user manual, an administrator guide and the reference documents at https://pierrejochem.github.io/rostdav/ (built from site/ and docs/, see site/README.md), SECURITY.md, and a social preview image in assets/brand/.

Fixed

• The profile picture is now shown where a user appears as a round icon: the icon at the top right of every page, and the user list and user details in the administration (before, only the first letter was shown). The picture's address carries its version, so a new picture shows at once and not after the browser's cache has expired.

Changed

• Dependencies: hmac 0.13, sha1 0.11, chacha20poly1305 0.11, base64 0.23, ulid 3, tower-http 0.7, and the transitive ctutils 0.4.5 (RUSTSEC-2026-0385, non-constant-time masks in 0.4.2). Secrets sealed by earlier versions still open (a test holds a value sealed by the old library). The Rust version needed to build is now 1.87 (was 1.85). Dependabot proposes updates from now on.
• Sign-in pages (sign-in, second factor, device connection): the full Rostdav logo from assets/brand (mark and wordmark, set in the page's own font) beside the form on a dark brand panel, with a short tagline; on phones the panel becomes a band above the form.