hop.show

Dashboard locked.

Artifact URLs stay public-by-link, but the management dashboard requires the internal dashboard password.

Publishing still uses the CLI/API key. Dashboard auth uses a separate password when configured.