Live portal: React + dockview multi-stream viewer behind Authentik; MediaMTX HLS/WebRTC/API re-enabled; is-live Discord hook

live/: every active stream opens as a dockable window (WHEP, HLS fallback), audio follows the
focused window, per-window mute/volume, pinning. Caddy live.HOST block with forward-auth proxies
/api /webrtc /hls to MediaMTX on loopback and serves /srv/live. WebRTC media on 8189 (firewall).
configure.py asks the live hostname and an optional Discord webhook; MediaMTX -ffmpeg image runs
the runOnReady hook. deployLive.sh builds and ships dist/.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

deployLive.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+# Build the live portal here and push the static files to /srv/live on the server. Caddy serves them as-is.
+set -euo pipefail
+cd "$(dirname "$0")/live"
+HOST="${1:-debian@ovh1.dumpstervigilantes.rip}"
+npm install --no-audit --no-fund --loglevel=error
+npm run build
+ssh "$HOST" 'sudo install -d -o "$(id -u)" -g "$(id -g)" /srv/live && rm -rf /srv/live/*'
+scp -r dist/. "$HOST:/srv/live/"
+ssh "$HOST" 'ls -la /srv/live | head -5'
+echo "deployed -> https://$(ssh "$HOST" 'cd ~/vanguard-stream && grep ^LIVE_HOST= .env | cut -d= -f2')/"