Two additions for trusted local launchers (notably SnowLumaDesktop) to
configure core without writing to disk-shared config:
- SNOWLUMA_WEBUI_PORT overrides runtime.json's webuiPort at startup
without persisting; CLI/Docker users continue to drive it from the
file. Mirrors the existing SNOWLUMA_HOOK_RUNTIME_DIR / *_TRUST_PROXY
conventions.
- SNOWLUMA_WEBUI_BOOTSTRAP_PASSWORD seeds the initial WebUI password on
first launch (when webui.json doesn't yet exist), with
mustChangePassword=false. After the file is persisted the env var is
ignored — password rotation continues through the UI.