Lock the bot to its operator, fix aws-secrets, and explain the no-trade

Failure-mode logging, drawdown alerts, route transparency, HTTP guard