Add LetsMesh compatibility ingest, decoder integration, and admin auth updates

.env.example

@@ -80,6 +80,14 @@ MQTT_PREFIX=meshcore
 # When enabled, uses TLS with system CA certificates (e.g., for Let's Encrypt)
 MQTT_TLS=false
 
+# MQTT transport protocol
+# Options: tcp, websockets
+MQTT_TRANSPORT=tcp
+
+# MQTT WebSocket path (used only when MQTT_TRANSPORT=websockets)
+# Common values: /mqtt, /
+MQTT_WS_PATH=/mqtt
+
 # External port mappings for local MQTT broker (--profile mqtt only)
 MQTT_EXTERNAL_PORT=1883
 MQTT_WS_PORT=9001
@@ -123,6 +131,30 @@ CONTACT_CLEANUP_DAYS=7
 # =============================================================================
 # The collector subscribes to MQTT events and stores them in the database
 
+# Collector MQTT ingest mode
+# - native: expects <prefix>/<pubkey>/event/<event_name> topics
+# - letsmesh_upload: expects LetsMesh observer uploads on
+#   <prefix>/<pubkey>/(packets|status|internal)
+COLLECTOR_INGEST_MODE=native
+
+# LetsMesh decoder support (used only when COLLECTOR_INGEST_MODE=letsmesh_upload)
+# Set to false to disable external packet decoding
+COLLECTOR_LETSMESH_DECODER_ENABLED=true
+
+# Decoder command (must be available in container PATH)
+# Examples: meshcore-decoder, /usr/local/bin/meshcore-decoder, npx meshcore-decoder
+COLLECTOR_LETSMESH_DECODER_COMMAND=meshcore-decoder
+
+# Optional: channel secret keys (comma or space separated) used to decrypt GroupText
+# packets. This supports unlimited keys.
+# Note: Public + #test keys are built into the collector code by default.
+# To show friendly channel names in the web feed, use label=hex (example: bot=ABCDEF...).
+# Without keys, encrypted packets cannot be shown as plaintext.
+# COLLECTOR_LETSMESH_DECODER_KEYS=
+
+# Timeout in seconds per decode invocation
+COLLECTOR_LETSMESH_DECODER_TIMEOUT_SECONDS=2.0
+
 # -------------------
 # Webhook Settings
 # -------------------
@@ -235,6 +267,12 @@ WEB_PORT=8080
 # Supported: en (see src/meshcore_hub/web/static/locales/ for available translations)
 # WEB_LOCALE=en
 
+# Locale used for date/time formatting in the web dashboard
+# Controls date ordering only; 24-hour clock is still used by default
+# Examples: en-US (MM/DD/YYYY), en-GB (DD/MM/YYYY)
+# Default: en-US
+# WEB_DATETIME_LOCALE=en-US
+
 # Auto-refresh interval in seconds for list pages (nodes, advertisements, messages)
 # Set to 0 to disable auto-refresh
 # Default: 30