v2.3.5

Gateway setup bootstrap lockout fixes

- Keep setup endpoints open during fresh installer bootstrap until installer completion or the one-hour first-start timeout.
- Add explicit /api/setup/complete flow and persisted setup lifecycle settings.
- Prevent existing installs and installer reruns from reopening setup bootstrap endpoints.
- Leave setup recovery window open after daemon or SSL bootstrap failures, while closing it after successful bootstrap.
- Document SETUP_BOOTSTRAP and setup API lockout behavior.