E4-5e (band 3): the web unit, last #274

Epic: #212 · Parent: #264 — band 3, last child. Created under the standing grant the owner gave on 2026-09-07; the composition is for review.

The web server, whole: webServer (24 users, top of the cut set), wifiConnected, webServerStarted, ntpSynced, lastWiFiAttempt, rtcSyncedFromNTP, the WiFi credential placeholders and NTP_SERVER; initWiFi, checkWiFi, initWebServer and the 23 handleWeb* / handleGeocache* handlers — about 1,100 lines.

It moves last because handleWebDiags alone reads 22 variables across every domain; after the four earlier children every one of them is published through a header, so the unit includes those headers and reaches back into src.ino for nothing. The original plan had this in band 4 as "a leaf consumer with 47 externs and 1 export"; it sits at the end of band 3 instead so that the acceptance of #264 — every cut-set variable defined in exactly one unit — is met by the children of #264.

The credential placeholders (REDACTED_SSID_1 and friends, #245) move with initWiFi into web.cpp. That is where #99 will replace them with runtime storage; the location is noted in #99 when this lands.

Not moved: the webServer.handleClient() call in loop (residue).

Acceptance

• scripts/verify_extraction.py PASS for the task
• Both toolchains build; pytest scripts/ passes
• nm on src.ino.cpp.o defines none of the 34 cut-set variables — the acceptance of E4-5 (band 3): own the 35-variable cut set, one unit per domain, in removal order #264, measured with python scripts/reference-graph.py
• Record appended to docs/god-object-inventory.md