commissioning: the layer, the acceptance tests, the harness rule, the docs, and the bench drills

meta-forgefirm: the forgefirm-users init replays the account at boot;
sshd refuses root and empty passwords and runs only while the panel
turns it on; the release image keeps an empty root password for the
console; the console banner; avahi announces forgefirm.local; https in
libmicrohttpd and ulfius; the panel on 80 and 443; the license bundle on
the rootfs; release.sh checks the root policy on the built rootfs.

forgetest: the commission suites (commission, commission_dark,
commission_sheet: 23 cases); the runner turns cloud mode on with the
typed phrase for a test that declares it; the baseline's motor_lock is
0; the log-export test checks the bundle for the camera key; the record
helpers write bytes as given and join the daemon's paths as POSIX. The
stream harness gains rule 24: a hold verdict is held again after a
resume. Bench drills: lens_travel.py and lens_stop_accel.py.

Docs: BRINGUP carries the present state; CAMPAIGN-LOG carries the dated
record.

scripts/bench/live_fire_drills.py

@@ -1,7 +1,7 @@
 #!/usr/bin/env python3
 """Live-fire bench drills - Phases 4, 5, 6. Runs on the board (the bench
 page) or from a LAN host, against grblHAL over TCP (port 23) and
-forgectrl over HTTP (:8080); the machine is GF_HOST, default 127.0.0.1.
+forgectrl over HTTP (:80, FORGECTRL_PORT overrides); the machine is GF_HOST, default 127.0.0.1.
 LIVE LASER: the operator must be armed with eye protection, a fire
 watch, an extinguisher, and the exhaust running. Every drill waits for
 the operator to press the physical arm button before the machine fires;
@@ -184,7 +184,8 @@ import urllib.request
 
 HOST = os.environ.get('GF_HOST') or '127.0.0.1'
 PORT = 23
-BASE = 'http://%s:8080' % HOST
+CTRL_PORT = int(os.environ.get('FORGECTRL_PORT') or 80)
+BASE = 'http://%s:%d' % (HOST, CTRL_PORT)
 
 
 def panel_token():
@@ -3021,7 +3022,7 @@ def post_ctrl(action):
     # http.client preserves the header-name case exactly as given.
     import http.client
     tok = panel_token()
-    c = http.client.HTTPConnection(HOST, 8080, timeout=8)
+    c = http.client.HTTPConnection(HOST, CTRL_PORT, timeout=8)
     c.putrequest('POST', '/controller/' + action)
     c.putheader('X-ForgeFIRM-Token', tok)
     c.putheader('Content-Length', '0')