Apply private appliance dashboard mode across upgrades

[keegreil]

Summary

• allow the Umbrel wrapper to opt into read-only private dashboard diagnostics through a non-secret environment override
• preserve existing config, identity, and consensus state during package upgrades
• keep the default off and destructive admin routes authenticated

Validation

• all 238 backend tests passed