Fix review findings: offline assets, security, audit logging

- Bundle Bootstrap CSS/JS/icons locally for air-gapped operation
- Add path traversal validation on image import source
- Disable Flask debug mode in production
- Fix file handle leaks, remove unused import
- Add python3-pip, python3-venv, p7zip-full to offline packages
- Add pip wheel download/bundling for offline Flask install
- Change UFW default policy from allow to deny
- Fix wrong path displayed in unattend editor template
- Dynamic sidebar image lists from all_image_types
- Add audit logging for all write operations
- Audit log viewer page with activity history

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

download-packages.sh

@@ -26,6 +26,9 @@ PLAYBOOK_PACKAGES=(
     ufw
     cron
     wimtools
+    python3-pip
+    python3-venv
+    p7zip-full
 )
 
 # Packages installed during autoinstall late-commands (NetworkManager, WiFi, etc.)
@@ -64,21 +67,28 @@ DEP_COUNT=$(echo "$DEPS" | wc -l)
 echo "    Found $DEP_COUNT packages (including dependencies)"
 
 # Download all packages
-echo "[3/3] Downloading packages to $OUT_DIR..."
+echo "[3/4] Downloading .deb packages to $OUT_DIR..."
 cd "$OUT_DIR"
 apt-get download $DEPS 2>&1 | tail -5
 
 DEB_COUNT=$(ls -1 *.deb 2>/dev/null | wc -l)
 TOTAL_SIZE=$(du -sh . | cut -f1)
 
+echo "    $DEB_COUNT packages ($TOTAL_SIZE)"
+
+# Download pip wheels for Flask webapp (offline install)
+echo "[4/4] Downloading Python wheels for webapp..."
+PIP_DIR="$(dirname "$OUT_DIR")/pip-wheels"
+mkdir -p "$PIP_DIR"
+pip3 download -d "$PIP_DIR" flask lxml 2>&1 | tail -5
+
+WHL_COUNT=$(ls -1 "$PIP_DIR"/*.whl "$PIP_DIR"/*.tar.gz 2>/dev/null | wc -l)
+echo "    $WHL_COUNT Python packages downloaded to pip-wheels/"
+
 echo ""
 echo "============================================"
 echo "Download complete!"
 echo "============================================"
-echo "  Packages: $DEB_COUNT"
-echo "  Total size: $TOTAL_SIZE"
-echo "  Location: $OUT_DIR/"
-echo ""
-echo "Next: copy these into your ubuntu_playbook/ directory"
-echo "  cp $OUT_DIR/*.deb /path/to/ubuntu_playbook/"
+echo "  .deb packages: $DEB_COUNT ($TOTAL_SIZE) in $OUT_DIR/"
+echo "  Python wheels: $WHL_COUNT in $PIP_DIR/"
 echo ""