add auth support

components/views/index.templ

@@ -21,7 +21,7 @@ templ Index(info BuildInfo) {
 						<div>
 							<div class="web2-pill">vCTP Console</div>
 							<h1 class="mt-3 text-4xl font-bold">Chargeback Intelligence Dashboard</h1>
-							<p class="mt-2 text-sm text-slate-600">Point in time snapshots of consumption.</p>
+							<p class="mt-2 text-sm text-slate-600">Point in time snapshots of consumption with LDAP/JWT protected API access.</p>
 						</div>
 						<div class="web2-button-group">
 							<a class="web2-button" href="/snapshots/hourly">Hourly Snapshots</a>
@@ -58,6 +58,12 @@ templ Index(info BuildInfo) {
 						<p class="mt-2 text-sm text-slate-600">
 							Use fast vCenter totals views (Daily Aggregated and Hourly Detail 45d) and VM Trace views (Hourly Detail and Daily Aggregated) to move between long-range trends and granular timelines.
 						</p>
+						<p class="mt-2 text-sm text-slate-600">
+							When authentication is enabled, obtain a token from <code class="web2-code">POST /api/auth/login</code> and send it as <code class="web2-code">Authorization: Bearer &lt;token&gt;</code>.
+						</p>
+						<p class="mt-2 text-sm text-slate-600">
+							Role policy: <code class="web2-code">viewer</code> role covers read/report APIs, and <code class="web2-code">admin</code> role covers mutating/admin APIs (<code class="web2-code">admin</code> also grants viewer access). UI pages and <code class="web2-code">/metrics</code> remain public.
+						</p>
 					</div>
 						<div class="web2-card">
 							<h2 class="text-lg font-semibold mb-2">Snapshots and Reports</h2>