Web users had no persistent fingerprint, losing codex/achievements/
rankings on reconnect. Now web users enter nickname + password:
- New accounts: set password (min 4 chars, bcrypt hashed)
- Existing accounts: verify password to log in
- On success: deterministic fingerprint SHA256(web:nickname) assigned
- SSH users with real key fingerprints skip password entirely
New files: store/passwords.go, store/passwords_test.go
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Add Members field to RunRecord for party member names
- Save all party member names when recording a run
- Display party members in leaderboard (floor/gold tabs)
- Display party members in result screen rankings
- Solo runs show no party info, party runs show "(Alice, Bob, ...)"
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
