Phase 12: frame-accurate timecode via an overscan band — vgstrip encoder/decoder, sweep writes tmcd + creation_time + sidecar, dumpd /time, Caddy /time routes, MediaMTX microsecond names, /dock/clock/ page, dock band setup via obs-websocket, Go Live band composite + toggle, portal crops the band

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

configure.py

@@ -167,7 +167,10 @@ def write_caddy(domain, auth_host="", watch_host="", git_host="", bot_host="", l
 {live_host} {{
 	encode zstd gzip
 {gate(env.get("LIVE_REQUIRE_GROUP", ""))}	handle /me/* {{
-		reverse_proxy 127.0.0.1:8080          # dumpd: /me/stream-key for the logged-in streamer (Go Live)
+		reverse_proxy 127.0.0.1:8080          # dumpd: /me/stream-token for the logged-in streamer (Go Live)
+	}}
+	handle /time {{
+		reverse_proxy 127.0.0.1:8080          # server clock for the timecode strip
 	}}
 	handle_path /api/* {{
 		reverse_proxy 127.0.0.1:9997
@@ -256,6 +259,9 @@ name:   {{http.request.header.X-Authentik-Name}}"
 	handle /me/* {{
 		reverse_proxy 127.0.0.1:8080
 	}}
+	handle /time {{
+		reverse_proxy 127.0.0.1:8080          # server clock for the timecode strip
+	}}
 
 	# Syncthing admin UI: Authentik + group {sync_group or 'any'}; Syncthing's own GUI login stays as a second layer
 {sync_gate}	redir /sync /sync/ 308
@@ -369,7 +375,7 @@ authHTTPExclude:
 # ---- recording --------------------------------------------------------
 pathDefaults:
   record: yes
-  recordPath: /recordings/%path/.live/%Y-%m-%d_%H-%M-%S   # hidden while recording; the sweep publishes the finished file one level up
+  recordPath: /recordings/%path/.live/%Y-%m-%d_%H-%M-%S-%f   # hidden while recording; microseconds = server arrival time (timecode fallback)
   recordFormat: fmp4
   recordPartDuration: 1s
   recordSegmentDuration: 12h      # one file per stream unless it runs >12h