docs: fix stale first-login copy (random initial password, rotation optional)

The in-panel help "First login" section still claimed you log in with the
literal default password `clusev` and that "the panel forces a password change
immediately". Both are false since this cycle: the installer generates a RANDOM
password shown once in the closing summary, and EnsureSecurityOnboarded only
nudges (skippable), never forces.

- help/overview.blade.php (en+de): rewritten — sign in with the initial
  password from the installer summary; setting your own is recommended (a
  banner reminds) but not forced.
- lang/{en,de}/auth.php: default-password banner → "Initial password still in
  use" / "Initialpasswort noch aktiv".
- ResetAdmin.php: reset output "Einmal-Passwort" → "Neues Passwort".
- EnsureSecurityOnboarded.php: comment wording aligned.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

app/Console/Commands/ResetAdmin.php

@@ -57,7 +57,7 @@ class ResetAdmin extends Command
 
         $this->info("Passwort für {$user->email} zurückgesetzt.");
         if (! $this->option('password')) {
-            $this->warn("Einmal-Passwort (jetzt notieren): {$password}");
+            $this->warn("Neues Passwort (jetzt notieren): {$password}");
         }
         if ($this->option('disable-2fa')) {
             $this->info('2FA + Backup-Codes entfernt — beim nächsten Login neu einrichten.');

app/Http/Middleware/EnsureSecurityOnboarded.php

@@ -9,7 +9,7 @@ use Symfony\Component\HttpFoundation\Response;
 /**
  * After login, NUDGE the operator to rotate the seeded password — but do not force it. The prompt
  * shows once per session and can be skipped (PasswordChange::skip sets `onboarding.password_skipped`);
- * a persistent banner keeps warning while the default password is still in use. 2FA is optional too,
+ * a persistent banner keeps warning while the initial password is still in use. 2FA is optional too,
  * so it is never forced here.
  */
 class EnsureSecurityOnboarded

lang/de/auth.php

@@ -27,7 +27,7 @@ return [
     'save_and_continue' => 'Speichern & weiter',
     'saving' => 'Speichere…',
     'skip_for_now' => 'Vorerst überspringen',
-    'default_pw_warning' => 'Standard-Passwort aktiv. Aus Sicherheitsgründen solltest du es ändern.',
+    'default_pw_warning' => 'Initialpasswort noch aktiv. Aus Sicherheitsgründen solltest du es ändern.',
     'default_pw_change' => 'Ändern',
 
     // ── Two-factor (shared label) ────────────────────────────────────────

lang/en/auth.php

@@ -27,7 +27,7 @@ return [
     'save_and_continue' => 'Save & continue',
     'saving' => 'Saving…',
     'skip_for_now' => 'Skip for now',
-    'default_pw_warning' => 'Default password in use. For security, you should change it.',
+    'default_pw_warning' => 'Initial password still in use. For security, you should change it.',
     'default_pw_change' => 'Change',
 
     // ── Two-factor (shared label) ────────────────────────────────────────

resources/views/livewire/help/content/de/overview.blade.php

@@ -15,11 +15,11 @@
 
 <div class="space-y-3">
     <h3 class="{{ $h }}">Erster Login</h3>
-    <p class="{{ $p }}">Nach der Installation meldest du dich mit der Admin-E-Mail und dem Standard-Passwort
+    <p class="{{ $p }}">Nach der Installation meldest du dich mit der Admin-E-Mail und dem <span class="text-ink">Initialpasswort</span>
-        <code class="{{ $code }}">clusev</code> an (die Standard-E-Mail ist <code class="{{ $code }}">admin@clusev.local</code>,
+        aus der Abschluss-Zusammenfassung des Installers an — ein zufällig generiertes Passwort, das nur einmal angezeigt wird.
-        sofern beim Installieren keine andere gesetzt wurde). Das Panel <span class="text-ink">erzwingt sofort einen
+        Die Standard-E-Mail ist <code class="{{ $code }}">admin@clusev.local</code>, sofern beim Installieren keine andere gesetzt
-        Passwortwechsel</span> — `clusev` ist ein bekanntes Standard-Passwort und nur bis zur Änderung gültig. Ändere es
+        wurde. Ein eigenes Passwort zu setzen ist <span class="text-ink">empfohlen</span> — ein Banner erinnert dich daran — aber
-        gleich beim ersten Login.</p>
+        nicht erzwungen, sodass dich eine verpasste Erinnerung nie aussperrt.</p>
 </div>
 
 <div class="space-y-3">

resources/views/livewire/help/content/en/overview.blade.php

@@ -14,10 +14,11 @@
 
 <div class="space-y-3">
     <h3 class="{{ $h }}">First login</h3>
-    <p class="{{ $p }}">After installation, sign in with the admin e-mail and the default password
+    <p class="{{ $p }}">After installation, sign in with the admin e-mail and the <span class="text-ink">initial password</span>
-        <code class="{{ $code }}">clusev</code> (the default e-mail is <code class="{{ $code }}">admin@clusev.local</code>
+        from the installer's closing summary — a random, auto-generated password shown only once. The default e-mail is
-        unless another was set at install time). The panel <span class="text-ink">forces a password change immediately</span> —
+        <code class="{{ $code }}">admin@clusev.local</code> unless another was set at install time. Setting your own password
-        `clusev` is a known default and only valid until you change it. Change it right away on first login.</p>
+        is <span class="text-ink">recommended</span> — a banner keeps reminding you — but not forced, so a missed reminder
+        can never lock you out.</p>
 </div>
 
 <div class="space-y-3">