This is the web container. It serves your current HTML app and proxies /api/* to the backend.
Token is stored only in memory on this page.
Your uploaded HTML is served here unchanged (still using localStorage for now). Next, we’ll replace its storage calls with API calls.