- lock node actions during daemon updates, clear stale update badges live, and add a global gateway updating screen that locks all users during self-update - keep inherited permissions inline in their normal categories, lock inherited scopes/resources in place, and support node-scoped console permissions in the picker and websocket enforcement - fix Docker table truncation/column sizing, consistent spinners, and initial loading states so lists and dashboard cards no longer flash empty before data arrives - add Alpine/OpenRC support paths to daemon setup scripts for nginx, docker, and monitoring nodes