Sync cezen-portal/ from live working copy (V1.0 GA polish + search-icon ordering fix)

Brings the ISO-packaged portal copy current with the live cezen-portal/
working directory, which had drifted across the entire V1.0 GA polish
initiative (Phases 1-10) plus this session's topnav icon-order bugfix.

- 52 existing files updated, 2 new pages added (about.html, health.html)
- cgit/cezen-portal/ is now byte-identical to cezen-portal/
- Backend files (rag_ingest.py, cezen_license.py) already in sync;
  main.py intentionally left as-is (cgit is ahead there with
  workstation-category commercial-fit logic not yet backported to the
  live working copy)

Next: rebuild the ISO (bash autoinstall/build-iso.sh) to bake this in.

cezen-portal/audit.html

@@ -4,7 +4,7 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Governance & Audit — Nexus One AI</title>
-  <link rel="stylesheet" href="style.css?v=4">
+  <link rel="stylesheet" href="style.css?v=12">
   <style>
     .audit-toolbar { display:flex; align-items:center; gap:10px; flex-wrap:wrap; margin-bottom:24px; }
     .audit-filter { padding:8px 12px; border:1.5px solid var(--bdr); border-radius:8px; font-size:13px; font-family:inherit; color:var(--ink); background:var(--navy2); outline:none; min-width:140px; }
@@ -74,6 +74,7 @@
         <a href="dashboard.html">Dashboard</a>
         <a href="analytics.html">Usage Analytics</a>
         <a href="audit.html" class="active">Governance & Audit</a>
+        <a href="health.html">Health Center</a>
         <span class="nav-drop-cat">MANAGE /</span>
         <a href="users.html">Users</a>
         <a href="teams.html">Teams</a>
@@ -113,7 +114,7 @@
       </div>
     </div>
   </nav>
-    <a href="notifications.html" style="position:relative">🔔</a>
+    <a href="notifications.html" class="nav-icon-btn" style="position:relative" aria-label="Notifications"><span class="icon-svg icon-sm" aria-hidden="true"><svg viewBox="0 0 24 24"><path d="M15 17h5l-1.4-1.4A2 2 0 0 1 18 14.2V11a6 6 0 1 0-12 0v3.2a2 2 0 0 1-.6 1.4L4 17h5"/><path d="M10 17a2 2 0 0 0 4 0"/></svg></span></a>
     <span class="badge" data-brand="tier">Basic Tier</span>
   <div id="nav-org-logo" class="nav-org-logo"></div>
 </header>
@@ -148,7 +149,7 @@
     </select>
     <input class="audit-filter" id="filter-user" type="text" placeholder="Filter by user…" oninput="applyFilters()">
     <button class="audit-btn" onclick="resetFilters()">Clear</button>
-    <button class="audit-btn" onclick="load()">↺ Refresh</button>
+    <button class="audit-btn" onclick="load()">Refresh</button>
     <button class="audit-btn primary" onclick="exportCSV()">↓ Export CSV</button>
   </div>
 
@@ -179,7 +180,7 @@
 </div>
 
 <footer>
-  <p>Nexus One AI &nbsp;·&nbsp; Powered by Cezen &nbsp;·&nbsp; Basic Tier</p>
+  <p>Nexus One AI &nbsp;·&nbsp; Powered by Cezen &nbsp;·&nbsp; <span data-brand="tier">Basic Tier</span></p>
 </footer>
 
 <script>
@@ -294,6 +295,6 @@ function exportCSV() {
 load();
 </script>
 <script src="auth.js"></script>
-<script src="branding.js"></script>
+<script src="branding.js?v=3"></script>
 </body>
 </html>