- serve /favicon.ico outside session middleware so it loads on the login
page too (was 404 via the catch-all -> requireSession redirect)
- add embedded internal/server/static/favicon.ico (monitor icon) and
<link rel=icon> on the login page and vnc.html
- in vnc.html wrap console.error before importing core/rfb.js to drop only
the harmless 'noVNC requires a secure context (TLS). Expect crashes!' line
(plain VNC-password auth uses pure-JS DES, not crypto.subtle); reword the
now-redundant disconnect hint
- update AGENTS.md with the favicon route and the secure-context note
