[boburning]

Summary

• removes stale FileBrowser HTTP and HTTP-auth state plumbing, default-credential copy, submenus, and visible Tweaks entry after the runtime payload/start path was retired by security(network): retire FileBrowser HTTP payload (NET-10) #621
• replaces current enablement instructions with a retirement notice pointing to reviewed key-only SSH/SFTP; retains versioned Onion 4.2 history and the public route
• preserves .httpState/.authhttpState migration cleanup, FileBrowser listener detection, and process termination for older cards
• teaches CI that website-only changes require Docusaurus—not ARM, cppcheck, native, ASan, or Shell—while this mixed C-source slice still builds/analyzes Tweaks and retains the full risk-3 Shell gate

This is a host-safe NET-10 slice and closes #626. It is based directly on current upstream main at f7fc3a7 and has no stacked PR dependency.

Validation

• affected Shell suites: 33/33 passed in 43.28 seconds after one manifest/provenance/dependency preflight
• branding plus HTTP runtime regression: 19/19 passed after replacing one stale positive assertion for removed FileBrowser marketing copy
• final exhaustive Shell suite: 811/811 passed across 8 shards in 151.20 seconds, no retry after the test correction
• CI ARM orchestration and scope suites passed; website-only build/static-analysis/Shell scopes now resolve to none and risk 0
• scoped cppcheck 2.19 for src/tweaks: completed in 1.14 seconds
• pinned Miyoo ARM toolchain compiled the affected Tweaks consumer as a stripped 32-bit ARM EABI5 executable; SHA-256 72b79a3edcefa7d002bdd916ec9d926f3b7c26d253400ab3a7bd682089743371
• Git diff checks passed
• task-created ARM/cppcheck outputs, retained diagnostic log, and temporary containers were removed after evidence capture

Two pre-fix exhaustive attempts each reported 810/811 because branding_copy.bats still required the exact “website hosted by BloomOS” sentence that this slice intentionally removes. The retained diagnostic log identified that deterministic assertion; it was corrected and the post-fix exhaustive gate passed 811/811. No provenance gate failed and no blind additional rerun was used.

The Docusaurus build and affected incremental ARM compile remain required repository checks.

Device evidence and limitations

• no device deployment, Wi-Fi/profile/listener mutation, reboot, input injection, ROM/Save access, overlay change, or signed-update mutation was performed
• the Mini Plus remains on its prior signed baseline with the existing DISP-04 Bloom Shell overlay preserved
• this source/UI cleanup does not claim that FileBrowser or Telnet remnants on the older installed card have been remediated
• NET-10 remains in progress until a coherent signed Full candidate verifies retired payloads, listener lockdown, rollback, and Wi-Fi stability without recreating the prior rollback loop
• remote evidence does not certify physical controls, LCD, audio, gameplay, save semantics, or power behavior