feat(stats): add privacy-bounded project dashboard

[frahlg]

What

• add a Cloudflare Worker and D1 dashboard for GitHub work, GitHub reach, ftw.energy visits, relay load, and fleet reports
• collect GitHub data each hour and server-side Cloudflare traffic each day
• let the relay send signed aggregate counts when both export settings are present
• serve a public view and an Access-protected private view

Privacy and safety

• fleet data stays opt-in at the FTW box and public groups stay hidden below 10 reports
• a fleet report is not shown as a user or unique box
• Cloudflare visits are not shown as unique people and need no browser tracker
• relay ingest uses an exact schema, a body limit, an HMAC signature, and a short time window
• the stats service never accepts room handles, addresses, serials, box ids, site names, IP addresses, or routed frames
• relay export failure cannot stop the relay
• the private route checks the Access JWT signature, issuer, and audience

Checks

• npm run verify
• npm audit — 0 findings
• entry bundle: 89,787 bytes gzip, below the 90,000 byte limit
• Worker tests: 9 passed
• relay export tests: 3 passed
• checked the public dashboard in a browser at desktop and 390 px; no page overflow or console errors

Deploy after review

Deployment is not part of this PR. It still needs the D1 id, Worker secrets, the Access app, the stats.ftw.energy custom domain, and the two optional relay export settings.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	ftw-webapp	16ee989	Commit Preview URL Branch Preview URL	Aug 14 2026, 04:31 PM