- curfew_status: rewrite next-transition calculation to scan up to 7 days
ahead; old branching showed wrong 'blocked until' for Friday nights
(assumed next day = weekday schedule) and Sunday nights (off by 2 days).
Verified against a minute-by-minute reference for a full week: 10080/10080.
- server: ThreadingHTTPServer so slow /status (pings/ssh) no longer blocks
the TURN OFF button and /budget requests.
- devices: atomic state file writes (tmp + os.replace) and tolerant
_load_state so a crash mid-write can't silently kill the whole system.
- server: /budget takes _timer_lock (no lost updates vs the budget tick)
and rejects unknown device ids instead of creating junk state entries.
- status: devices carry an explicit id; web UI keys off it instead of
parsing titles.
- gabi_check: exact username match (no more 'gabriel' false positives).
- gaja: password readable from GAJA_PASSWORD env var (hardcoded value
remains as fallback).
- tui: drop unused import.
