docs(web-console): fix stale http:// URLs — the console serves HTTPS on :47992

The punktfunk-web unit serves HTTP/1.1 over TLS with the host's own
self-signed identity cert, but several guides still told users to open
http://<host>:47992, which fails. Correct the scheme everywhere and note
the one-time browser cert warning in the canonical + SteamOS docs.

The RPM %post web hint was doubly wrong (http://<host-ip>:3000): wrong
scheme and wrong port — the service listens on :47992, not the :3000 dev
default. Also fixes scripts/web-init.sh, so the URL the SteamOS/Linux
installer prints at the end of setup is correct too.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

docs-site/content/docs/install.md

@@ -85,7 +85,7 @@ fallback without one. More detail — including the CLI `punktfunk-host service
    systemctl --user enable --now punktfunk-web
    ```
 
-   Then open `http://<host-ip>:47992`. Reading its [login password](/docs/web-console#login-password)
+   Then open `https://<host-ip>:47992`. Reading its [login password](/docs/web-console#login-password)
    and [arming PIN pairing](/docs/web-console#arm-pairing) are covered in
    [The Web Console](/docs/web-console).
 

docs-site/content/docs/steamos-host.md

@@ -86,7 +86,8 @@ When it finishes it prints the web-console URL and how to pair.
 
 By default the host **requires PIN pairing** (secure). Two ways to pair:
 
-- **Web console** (printed at the end of step 2): open `http://<device-ip>:47992`,
+- **Web console** (printed at the end of step 2): open `https://<device-ip>:47992` (self-signed host
+  cert — your browser warns once; trust it and continue),
   [arm pairing](/docs/web-console#arm-pairing), and enter the PIN on your client.
 - **From the client directly**: pick this host (it advertises over mDNS as `_punktfunk._udp`) and
   enter the PIN the host shows.

docs-site/content/docs/web-console.md

@@ -5,7 +5,8 @@ description: Enable the punktfunk browser console, read or change its login pass
 
 The web console is the browser UI for a punktfunk host — live status, paired devices, and the PIN
 pairing flow. It ships as the **`punktfunk-web`** systemd user unit on Linux and the **`PunktfunkWeb`**
-task on Windows, and serves on **`http://<host-ip>:47992`**. It's the surface you expose on the LAN to
+task on Windows, and serves on **`https://<host-ip>:47992`** (HTTPS with the host's own self-signed
+identity cert — your browser warns once; trust it and continue). It's the surface you expose on the LAN to
 administer the host; the host's own management API (47990) keeps every admin action loopback-only and
 off-loopback serves only read-only status + game-library browsing to paired clients.
 
@@ -19,11 +20,11 @@ off-loopback serves only read-only status + game-library browsing to paired clie
 
   ```sh
   systemctl --user enable --now punktfunk-web
-  # then browse to http://<host-ip>:47992
+  # then browse to https://<host-ip>:47992
   ```
 
 - **Windows host:** the installer sets up the console, its runtime, and the `PunktfunkWeb` task and
-  starts it at boot. There is nothing to enable — open `http://<this-PC>:47992`.
+  starts it at boot. There is nothing to enable — open `https://<this-PC>:47992`.
 
 - **SteamOS host:** the install script builds and starts the console as a user service for you. It
   prints the URL when it finishes.

docs-site/content/docs/windows-host.md

@@ -64,7 +64,7 @@ the Windows specifics follow.
 
 The installer also sets up the **web management console** (status, paired devices, the PIN pairing
 flow): it bundles the console plus its own runtime and runs it as the **`PunktfunkWeb`** task on
-**`http://<this-PC>:47992`**, starting at boot.
+**`https://<this-PC>:47992`**, starting at boot.
 
 #### Console login password