Control panel — write-mode for machines, tunnels, consoles. Replaces efus3's cp.eduz.ai for 2-series.
Type: frontend
Status: skeleton — landing door only. Real surface lands in subsequent rounds.
Depends on: machines-client, compute-client, auth-allowlist, cockpit-gateway
Notes: Controls behind allowlist + signed-cookie 2-tier auth. Ported from module00a (cockpit-ui) + module02 (controls) + module06 (consoles).