Sync cezen-portal/ from live working copy (V1.0 GA polish + search-icon ordering fix)

Brings the ISO-packaged portal copy current with the live cezen-portal/
working directory, which had drifted across the entire V1.0 GA polish
initiative (Phases 1-10) plus this session's topnav icon-order bugfix.

- 52 existing files updated, 2 new pages added (about.html, health.html)
- cgit/cezen-portal/ is now byte-identical to cezen-portal/
- Backend files (rag_ingest.py, cezen_license.py) already in sync;
  main.py intentionally left as-is (cgit is ahead there with
  workstation-category commercial-fit logic not yet backported to the
  live working copy)

Next: rebuild the ISO (bash autoinstall/build-iso.sh) to bake this in.

cezen-portal/auth.js

@@ -112,7 +112,7 @@ const EXTEND_INTERVAL  = 60000;  // poll session state every 60 seconds
       position: fixed;
       bottom: 20px;
       right: 20px;
-      background: #1E3A5F;
+      background: var(--brand-hover, #6D28D9);
       color: white;
       border-radius: 12px;
       padding: 14px 18px;
@@ -121,18 +121,18 @@ const EXTEND_INTERVAL  = 60000;  // poll session state every 60 seconds
       z-index: 9999;
       box-shadow: 0 8px 32px rgba(0,0,0,.35);
       max-width: 320px;
-      border-left: 4px solid #F59E0B;
+      border-left: 4px solid var(--amber, #D97706);
       animation: cezenFadeIn .3s ease;
     }
     @keyframes cezenFadeIn { from { opacity:0; transform:translateY(10px); } to { opacity:1; transform:none; } }
-    #cezen-timeout-banner.expired { border-color: #EF4444; }
-    #cezen-timeout-banner strong { display:block; margin-bottom:4px; font-size:14px; }
+    #cezen-timeout-banner.expired { border-color: var(--red, #DC2626); }
+    #cezen-timeout-banner strong { display:flex; align-items:center; gap:6px; margin-bottom:4px; font-size:14px; }
     #cezen-timeout-banner .tb-actions { display:flex; gap:8px; margin-top:10px; }
     #cezen-timeout-banner .tb-btn {
       flex:1; padding:6px 0; border:none; border-radius:7px; font-size:12px;
       font-weight:700; cursor:pointer; font-family:inherit;
     }
-    #cezen-timeout-banner .tb-extend { background:#0D9488; color:white; }
+    #cezen-timeout-banner .tb-extend { background:var(--green, #16A34A); color:white; }
     #cezen-timeout-banner .tb-logout  { background:rgba(255,255,255,.15); color:white; }
   `;
   document.head.appendChild(style);
@@ -140,7 +140,7 @@ const EXTEND_INTERVAL  = 60000;  // poll session state every 60 seconds
   const banner = document.createElement('div');
   banner.id = 'cezen-timeout-banner';
   banner.innerHTML = `
-    <strong>⏱ Session expiring soon</strong>
+    <strong><span class="icon-svg icon-xs" aria-hidden="true"><svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="10"/><path d="M12 6v6l4 2"/></svg></span> Session expiring soon</strong>
     <span id="cezen-timeout-msg">Your session expires in <b id="cezen-countdown"></b></span>
     <div class="tb-actions">
       <button class="tb-btn tb-extend" id="cezen-extend">Stay signed in</button>