Safe EJS bootstrap for /remote/guest; panel session wins over stale guest cookie.
Temporary opaque links give guests a minimal Web Remote UI for selected devices only, without Console inventory or add-any-ID paths. Also fix mesh_share desktop tunnel auth for unauthenticated guests.