Merge the wilm work, act on the five-agent review, verify the launch-path policy on Windows

frontend/src/utils/siteSettings.js

@@ -37,6 +37,14 @@ export async function getFacilityName() {
   return getSetting('facility_name', 'ShopDB')
 }
 
+// Environment channel label (e.g. 'DEV') injected by the backend from
+// SHOPDB_ENV_LABEL. Empty on stable/main deployments, which renders no badge.
+// Drives the red DEV tag in the sidebar so a bleeding-edge container is
+// obviously distinct from a stable one running side by side.
+export async function getEnvLabel() {
+  return getSetting('env_label', '')
+}
+
 // Main site logo (sidebar, login, dashboard header). Fallback = shipped GE mark.
 export async function getSiteLogo() {
   return withBase(await getSetting('site_logo', '/ge-aerospace-logo.svg'))