- dashboard: Match stat cards via link role with count+label pattern to avoid matching subtitle paragraph containing "certificates" - role-access: Use Bun.password.hash (built-in bcrypt) instead of bcryptjs which is not installed in the production container Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>