feat(ui): show internal hostname and densify config UI

Add an application Internal access section that loads the running
container hostname (skipped for Compose apps), densify configuration
diff and popup-small defaults, dock the server-timing HUD into the
mobile top bar, restyle the 2FA challenge with the auth shell, and
enforce 16px mobile form fonts to prevent iOS zoom.

resources/css/app.css

@@ -223,6 +223,14 @@
         position: relative;
         z-index: 2;
     }
+
+    @media (max-width: 767px) {
+        :root input,
+        :root textarea,
+        :root select {
+            font-size: 16px !important;
+        }
+    }
 }
 
 /*
@@ -233,14 +241,6 @@ body {
     @apply w-full min-h-full bg-gray-50 dark:bg-app dark:text-fg-dim;
 }
 
-@media (max-width: 767px) {
-    input,
-    textarea,
-    select {
-        font-size: 16px;
-    }
-}
-
 body {
     /* overflow-x: clip (not hidden) — hidden creates a scroll containment that
        breaks position:sticky on settings sidebars and other in-page pins. */