Sync cezen-portal/ from live working copy (V1.0 GA polish + search-icon ordering fix)

Brings the ISO-packaged portal copy current with the live cezen-portal/
working directory, which had drifted across the entire V1.0 GA polish
initiative (Phases 1-10) plus this session's topnav icon-order bugfix.

- 52 existing files updated, 2 new pages added (about.html, health.html)
- cgit/cezen-portal/ is now byte-identical to cezen-portal/
- Backend files (rag_ingest.py, cezen_license.py) already in sync;
  main.py intentionally left as-is (cgit is ahead there with
  workstation-category commercial-fit logic not yet backported to the
  live working copy)

Next: rebuild the ISO (bash autoinstall/build-iso.sh) to bake this in.

cezen-portal/index.html

@@ -4,7 +4,7 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Nexus One AI Portal</title>
-  <link rel="stylesheet" href="style.css?v=10">
+  <link rel="stylesheet" href="style.css?v=12">
 </head>
 <body>
 
@@ -57,6 +57,7 @@
         <a href="dashboard.html">Dashboard</a>
         <a href="analytics.html">Usage Analytics</a>
         <a href="audit.html">Governance & Audit</a>
+        <a href="health.html">Health Center</a>
         <a href="feedback.html">Feedback &amp; Ratings</a>
         <span class="nav-drop-cat">MANAGE /</span>
         <a href="users.html">Users</a>
@@ -145,7 +146,7 @@
       </div>
       <div class="status-bar-right">
         <span id="status-last-checked" class="status-ts"></span>
-        <button class="status-refresh-btn" onclick="runChecks()" title="Refresh status">↺ Refresh</button>
+        <button class="status-refresh-btn" onclick="runChecks()" title="Refresh status">Refresh</button>
       </div>
     </div>
     <div class="status-cards" id="status-cards">
@@ -642,7 +643,7 @@ function renderCards(states) {
     const state   = states[svc.id] || 'checking';
     const isUp    = state === 'up';
     const openBtn = (isUp && svc.openLink)
-      ? `<a class="s-open-btn" href="${svc.openLink}" target="_blank">Open ↗</a>`
+      ? `<a class="s-open-btn" href="${svc.openLink}" target="_blank">Open</a>`
       : '';
     const checking = state === 'checking'
       ? '<span class="s-dot checking"></span><span class="s-state checking">Checking…</span>'
@@ -821,7 +822,7 @@ fetchMetrics();
 setInterval(fetchMetrics, 30000);
 </script>
 <script src="auth.js"></script>
-<script src="branding.js"></script>
+<script src="branding.js?v=3"></script>
 <script>
 function renderLocalIcons() {
   const paths = {