Harden managed server deployment and authentication

PROGRESS.md

@@ -10,6 +10,25 @@ up instantly. Newest status at the top.
 
 ## ▶ Where we left off / next action
 
+- **Done (2026-09-15): Server deployment hardening checkpoint.** Pushed existing work
+  through `653131b` to `origin/dotnet/foundations`. Added CLI/environment configuration,
+  all-interface port 8384 defaults, config/fingerprint commands, local administrator
+  provisioning with hidden/stdin/environment password input, JSON readiness, an exclusive
+  instance lock, transport-failure observation and ten-second graceful shutdown.
+  Password-attempt buckets are shared by IP/account across reconnects, bounded to 4096
+  keys and enforce configurable burst/refill plus escalating backoff before Argon2.
+  Added self-contained win-x64 publishing with separate checked runtime lock files;
+  server publishes without the audio/codec shim. Behavior tests verify precedence,
+  invalid input, cross-connection/account throttling, readiness, duplicate-instance refusal,
+  active TLS shutdown and real published-executable provisioning/fingerprint persistence.
+  **Verified:** 174 managed tests with all conformance/published-server variables enabled;
+  warning-free Release build, native build/29 CTest tests and permissive package audit.
+  **Next (user priority):** managed client-core and audio prerequisites, then Windows
+  WinForms cutover before either Apple GUI. Windows is already C# at the UI layer but
+  still depends on native protocol/audio. Linux publishing/container/service packaging
+  and operational soak remain before broad production rollout; do not claim Phase 4
+  production rollout or GUI parity complete without those platform/behavior checks.
+
 - **Done (2026-09-15): Managed channel and administration checkpoint.** Reaper committed
   as `274b850`. Added protected joins and capacity checks, leave-to-Lobby, persisted channel
   create/edit/delete with events, parent/cycle validation and Lobby protection. Native