HIVE_VISIBILITY config gates dashboard access

Operators can now set HIVE_VISIBILITY to public or private to control whether the dashboard requires authentication. In private mode, anonymous visitors are redirected to the login page, and access is restricted to authenticated users that pass any configured provider’s domain allowlist. Public mode leaves the dashboard open to anyone. The default in the generic Helm chart is public.