chore(release): v0.2.0 — System TLS rationale + version bump + CHANGELOG
- System page: collapsible "Warum läuft TLS über Caddy?" explaining the single
host-exposed TLS terminator (auto Let's Encrypt + auto-renew + wss for Reverb,
decoupled from app updates) — answers the operator's question in the UI; Caddy stays.
- Bump 0.1.1 -> 0.2.0 (cross-OS management, firewall + fail2ban control, command
palette) + CHANGELOG entry.
Pint clean; Codex review clean; R12 — all 9 routes HTTP 200, 0 console errors,
TLS note renders.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
4a4d107bfc