Make the dashboard public or private via HIVE_VISIBILITY

Self-hosters can now choose whether the dashboard requires sign-in or remains publicly viewable, using a new HIVE_VISIBILITY environment variable that gates the dashboard routes with a plug.