v0.35.1: performance, AGPL licensing and documentation overhaul

- Web Server reads static files inline; proxy middleware chain flattened
- About window with license summary and project links; AGPL-3.0-or-later
- Rewritten documentation: feature list, screenshots, performance guide
- Fix false spikes in per-Vhost request-rate charts

update.sh

@@ -27,8 +27,7 @@ prune_directories() {
     fi
 
     while IFS= read -r -d '' sorted; do
-        # find prints a numeric mtime sort key before the actual path. Never
-        # pass that sort key to rm (the old updater did, so nothing was freed).
+        # Strip the mtime sort key before passing paths to rm.
         entry="${sorted#* }"
         name="${entry##*/}"
 
@@ -94,9 +93,7 @@ cleanup_installed_releases() {
     prune_directories "$releases" "$KEEP_RELEASES" "$current_release"
 }
 
-# Cargo keeps critical fingerprints, build scripts and compiled deps in target/.
-# Never remove these: doing so would trigger a full rebuild. Only stale
-# incremental state can be reclaimed, after a successful managed update.
+# Only stale incremental state is reclaimed; compiled dependencies are kept.
 cleanup_safe_cargo_target() {
     local target="${CARGO_TARGET_DIR:-$ROOT/target}"
     local profile item
@@ -110,8 +107,7 @@ cleanup_safe_cargo_target() {
     command -v flock >/dev/null 2>&1 || return 0
     for profile in release debug; do
         [[ -d "$target/$profile" && ! -L "$target/$profile" ]] || continue
-        # Cargo itself uses this file as its profile build lock. Skip if
-        # another build is using it, instead of competing with cargo.
+        # Skip while another cargo build holds the profile lock.
         exec {cargo_lock_fd}>>"$target/$profile/.cargo-lock"
         if ! flock -n -x "$cargo_lock_fd"; then
             exec {cargo_lock_fd}>&-