Admin templates & the WASM client

When cms is enabled the admin renders site-owned templates from hbs/cms/: login, invite, dashboard (context: menu, session), list (columns, rows, total, next_cursor), form (fields, row, mode, action), users (rows), and optional _layout. Login and invite pages get bare:true in the context — this example renders them without the sidebar.

Sign-in, invites and password change run through the embedded WASM client served at /static/wasm/cmsnap_wasm.js (compiled into the binary). The wiring lives in static/js/cms-*.js: it calls the OPAQUE endpoints /cms/login/start+finish, /cms/invite/start+finish, /cms/passwd/start+finish.