Public web-only release: SvxPortal front-end + auth backend, install templates and INSTALL.md

Stripped from the internal repo: per-box deploy trees, Go services (nodelist/astmeta/proxy/svxdr),
deploy/sync scripts and all secrets. Config templates for nginx, PHP-FPM, Redis and tmpfiles
live in install/ with CHANGEME placeholders.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

auth/admin_bans.php

@@ -0,0 +1,43 @@
+<?php
+declare(strict_types=1);
+require __DIR__ . '/lib.php';
+start_session();
+$uuid = $_SESSION['uid'] ?? null;
+if (!is_string($uuid) || $uuid === '') { header('Location: /'); exit; }
+$me = acct_get($uuid);
+$lvl = acct_admin_level($uuid);
+if ($lvl < 2) { header('Location: /'); exit; }
+
+$page_title = 'Admin · Global Bans — SvxPortal';
+require __DIR__ . '/header.php';
+?>
+<div class="container py-4" style="max-width:800px;">
+  <div id="page-admin-bans">
+    <div class="panel">
+      <div class="d-flex justify-content-between align-items-center mb-3">
+        <h5 class="mb-0">Global Bans <span id="banReadonlyBadge" class="badge bg-secondary ms-2 small" style="display:none;">read-only</span></h5>
+        <button class="btn btn-outline-secondary btn-sm" id="btnBansRefresh">Refresh</button>
+      </div>
+      <p class="small text-secondary mb-3">A global ban blocks the callsign on the portal — a banned callsign cannot register or sign in.</p>
+
+      <div class="row g-3">
+        <!-- Callsigns -->
+        <div class="col-12 col-md-6">
+          <h6>Callsigns</h6>
+          <div style="max-height:300px; overflow-y:auto; border:1px solid var(--line); padding:6px; border-radius:4px;">
+            <ul class="list-unstyled mb-0 small mono" id="banCsList"></ul>
+          </div>
+          <div class="d-flex gap-2 mt-2 ban-add-row">
+            <input type="text" class="form-control form-control-sm mono" id="banCsAdd" placeholder="CALLSIGN" maxlength="10" style="text-transform:uppercase;">
+            <button class="btn btn-outline-danger btn-sm" data-ban-add="callsign">Ban</button>
+          </div>
+        </div>
+      </div>
+      <div id="banMsg" class="small mt-3" style="display:none;"></div>
+    </div>
+  </div>
+</div>
+<?php
+$extra_scripts = '<script>var ADMIN_LEVEL = ' . $lvl . ';</script><script src="/auth/admin_bans.js?v=' . @filemtime(__DIR__ . '/admin_bans.js') . '"></script>';
+require __DIR__ . '/footer.php';
+?>