feat: public access via reverse proxy + 'The Ledger' UI design pass

- compose publishes 8787 on all interfaces (NPM fronts it at
  bountyboard.anypreta.com); APP_BASE_URL + TRUSTED_PROXY_CIDRS configured,
  client-IP resolution through the proxy verified live
- design: self-hosted variable fonts (Fraunces display serif, Schibsted
  Grotesk UI, Spline Sans Mono ledger numerals), paper-grain overlay,
  hairline double rules, letterpress buttons, stamped badges, banknote
  bounty chips, ledger tables, staggered page reveal (reduced-motion safe)
- §10 tokens, 2px radius, both themes, AA contrast preserved exactly;
  no build step, CSP-clean (fonts/img self/data)
- login/register masthead; headless-chrome screenshots verified both themes

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

DECISIONS.md

@@ -150,3 +150,19 @@ Spec-silent choices, recorded as required by the build instructions.
   sizes WeKan handles). Auth: username+password login per sync with a 10-min
   token reuse window, or a pre-issued token. Card attachments are not
   imported in v1.
+
+## Remote access + UI design pass (user-requested)
+
+- **App published on 0.0.0.0:8787** (spec default loopback-only kept as a
+  commented line in compose): this host's pattern exposes services directly
+  (gitea/outline/wekan) and Docker-published ports bypass UFW anyway. The
+  public entrypoint is Nginx Proxy Manager → http://bountyboard.anypreta.com
+  with `APP_BASE_URL` set accordingly and `TRUSTED_PROXY_CIDRS=172.16.0.0/12`
+  so audit-log client IPs resolve through the proxy.
+- **"The Ledger" design pass** (user invoked the frontend-design skill):
+  §10 tokens, 2px radius, AA contrast and both themes unchanged; typography
+  deviates from the spec's system font stack by request — self-hosted
+  variable woff2 (Fraunces display, Schibsted Grotesk body, Spline Sans Mono
+  for ledger numerals), ~147 KB total, no build step, CSP font-src 'self'.
+  Adds paper grain, hairline double rules, letterpress buttons, stamp
+  badges, staggered page reveal (disabled under prefers-reduced-motion).