fix: UEFI ESP partition type, WebSocket cookie, password UX

UEFI boot:
- xorriso now uses -append_partition with ESP type GUID
  (C12A7328-F81F-11D2-BA4B-00A0C93EC93B) instead of -isohybrid-gpt-basdat
  which only creates "basic data" partitions. Strict UEFI firmware
  requires the correct ESP type to find BOOTX64.EFI.
- Uses Arch Linux ISO approach: -append_partition + appended_part_as_gpt

WebSocket/login from LAN browser:
- HTTPS nginx /ws block was missing proxy_set_header Cookie $http_cookie
  Session cookie wasn't forwarded → backend returned 401 → WS failed

Password UX:
- Renamed "Change Password" → "Set Password" with description explaining
  default password is password123

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

neode-ui/src/locales/en.json

@@ -177,15 +177,15 @@
     "loggedIn": "Currently logged in",
     "didHelper": "Decentralized identifier for passwordless auth",
     "onionHelper": "Onion address for node interface and peer discovery over Tor",
-    "changePassword": "Change Password",
+    "changePassword": "Set Password",
     "enable2fa": "Enable 2FA",
     "disable2fa": "Disable 2FA",
     "logout": "Logout",
     "loggingOut": "Logging out...",
     "twoFactorAuth": "Two-Factor Authentication",
     "twoFaProtect": "Protect your account with an authenticator app",
-    "changePasswordTitle": "Change Password",
-    "changePasswordDesc": "Updates both web login and SSH access. Use a strong password (12+ chars, upper, lower, digit, special).",
+    "changePasswordTitle": "Set Password",
+    "changePasswordDesc": "Set a new password for web login and SSH access. Default password is 'password123'. Use a strong password (12+ chars, upper, lower, digit, special).",
     "currentPassword": "Current Password",
     "newPassword": "New Password",
     "confirmNewPassword": "Confirm New Password",