Self-hosting Hermes Agent on Railway: the dashboard that refuses to open unauthenticated

Full disclosure up front: I maintain a Railway template for this and get a kickback if you deploy through it. That's the whole pitch — everything below is the actual writeup. I've been poking at the s...