Apache reverse proxy for webapp, UI improvements

- Move Flask to localhost:9010, Apache serves port 9009 with static file
  handling and reverse proxy to fix intermittent asset loading on remote clients
- Add "PXE Manager" branding beneath logo in sidebar
- Increase code editor size (startnet.cmd and unattend XML) to 70vh
- Add test-lab.sh for full lab VM testing

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

playbook/pxe_server_setup.yml

@@ -331,6 +331,7 @@
         port: "{{ item }}"
         proto: "{{ 'udp' if item in ['67','69'] else 'tcp' }}"
       loop:
+        - "22"
         - "67"
         - "69"
         - "80"
@@ -430,6 +431,7 @@
       copy:
         dest: /etc/apache2/sites-available/pxe-server.conf
         content: |
+          Listen 9009
           <VirtualHost *:80>
               DocumentRoot {{ web_root }}
               <Directory "{{ web_root }}">
@@ -438,8 +440,19 @@
                   Require all granted
               </Directory>
               ProxyPreserveHost On
-              ProxyPass /manage http://127.0.0.1:9009/
-              ProxyPassReverse /manage http://127.0.0.1:9009/
+              ProxyPass /manage http://127.0.0.1:9010/
+              ProxyPassReverse /manage http://127.0.0.1:9010/
+          </VirtualHost>
+          <VirtualHost *:9009>
+              Alias /static /opt/pxe-webapp/static
+              <Directory "/opt/pxe-webapp/static">
+                  Require all granted
+                  Options -Indexes
+              </Directory>
+              ProxyPreserveHost On
+              ProxyPass /static !
+              ProxyPass / http://127.0.0.1:9010/
+              ProxyPassReverse / http://127.0.0.1:9010/
           </VirtualHost>
 
     - name: "Enable Apache proxy modules"