Parse TRUST_PROXY env values safely so the string "true" maps to a single proxy hop instead of crashing Express at startup with invalid IP address.
Merge .env keys instead of replacing files, patch systemd/NSSM in place, block panel updates when the server cannot be rebuilt, and stop routine updates from syncing admin passwords from .env into auth.db/PostgreSQL.