Lock the bot to its operator, fix aws-secrets, and explain the no-trade

Failure-mode logging, drawdown alerts, route transparency, HTTP guard

deploy: one-command nginx setup for bot.elghaly.dev