Fix: landing served at / instead of dashboard

- Renamed index.html → dashboard.html (express.static was serving index.html for /)
- / now correctly shows landing page (no logout button, no dashboard header)
- /dashboard shows dashboard.html (protected, requires auth)
- Incognito users see only landing + login/register

routes/pages.js

@@ -8,7 +8,7 @@ const pub = (...p) => path.join(__dirname, '..', 'public', ...p);
 router.get('/', (req, res) => res.sendFile(pub('landing.html')));
 
 // Dashboard (protected — after auth)
-router.get('/dashboard', (req, res) => res.sendFile(pub('index.html')));
+router.get('/dashboard', (req, res) => res.sendFile(pub('dashboard.html')));
 router.get('/home', (req, res) => res.redirect('/dashboard'));
 
 // Tools