fix(#175): error-page links + Enabled account toggle

- Error pages (404 error.html, 400, 403): "Go Home"/"Login" used host-absolute
  hrefs that bypassed the /DataCustodian context path (dead links) -> context-
  relative th:href. Removed their duplicate bottom Bootstrap <script>/icons (now
  provided once by the head fragment; double-loading broke the navbar dropdown).
  Browser-rendered HTML error page link targets all verified 200 (API clients
  still get a JSON error via content negotiation, as before).
- Accounts were always "Enabled = Yes" with no way to change it. Added an Enabled
  switch to the user-account form; update() persists it. A disabled account now
  shows "No" in the list and cannot sign in.

datacustodian suite: 160 tests, 0 failures.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: dfcoffin

openespi-datacustodian/src/main/java/org/greenbuttonalliance/espi/datacustodian/web/custodian/RetailCustomerController.java

@@ -141,6 +141,9 @@ public String update(@PathVariable Long retailCustomerId,
 		if (form.getRole() != null && !form.getRole().isBlank()) {
 			existing.setRole(form.getRole());
 		}
+		// Checkbox bound via th:field renders a hidden field, so a non-null value always arrives;
+		// default to enabled if somehow absent.
+		existing.setEnabled(form.getEnabled() != null ? form.getEnabled() : Boolean.TRUE);
 		if (form.getPassword() != null && !form.getPassword().isBlank()) {
 			existing.setPassword(customerPasswordEncoder.encode(form.getPassword()));
 		}

openespi-datacustodian/src/main/resources/templates/custodian/retailcustomers/form.html

@@ -41,6 +41,11 @@ <h2 class="mt-4" th:text="${editMode} ? 'Edit User Account' : 'New User Account'
                             <option value="ROLE_CUSTODIAN">Administrator (Custodian)</option>
                         </select>
                     </div>
+                    <div class="form-check form-switch mb-3">
+                        <input type="checkbox" id="enabled" class="form-check-input" role="switch"
+                               th:field="*{enabled}"/>
+                        <label for="enabled" class="form-check-label">Enabled (account may sign in)</label>
+                    </div>
                     <div class="mb-3">
                         <label for="password" class="form-label">Password</label>
                         <input type="password" id="password" class="form-control"

openespi-datacustodian/src/main/resources/templates/error.html

@@ -34,7 +34,7 @@ <h6>Error Details:</h6>
                 </div>
 
                 <div class="d-flex justify-content-center gap-3 mt-4">
-                    <a href="/" class="btn btn-primary">Go Home</a>
+                    <a th:href="@{/}" class="btn btn-primary">Go Home</a>
                     <button onclick="history.back()" class="btn btn-outline-secondary">Go Back</button>
                     <button onclick="location.reload()" class="btn btn-outline-info">Try Again</button>
                 </div>
@@ -43,11 +43,5 @@ <h6>Error Details:</h6>
 
         <footer th:replace="~{fragments/layout :: footer}"></footer>
     </div>
-
-    <!-- Bootstrap JS -->
-    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
-    
-    <!-- Bootstrap Icons -->
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.0/font/bootstrap-icons.css">
 </body>
 </html>

openespi-datacustodian/src/main/resources/templates/error/400.html

@@ -19,19 +19,13 @@ <h2 class="mb-4">Bad Request</h2>
                     The request could not be understood by the server due to malformed syntax.
                 </p>
                 <div class="d-flex justify-content-center gap-3">
-                    <a href="/" class="btn btn-primary">Go Home</a>
+                    <a th:href="@{/}" class="btn btn-primary">Go Home</a>
                     <button onclick="history.back()" class="btn btn-outline-secondary">Go Back</button>
                 </div>
             </div>
         </div>
 
         <footer th:replace="~{fragments/layout :: footer}"></footer>
     </div>
-
-    <!-- Bootstrap JS -->
-    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
-    
-    <!-- Bootstrap Icons -->
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.0/font/bootstrap-icons.css">
 </body>
 </html>

openespi-datacustodian/src/main/resources/templates/error/403.html

@@ -19,20 +19,14 @@ <h2 class="mb-4">Access Forbidden</h2>
                     You don't have permission to access this resource. Please contact your administrator if you believe this is an error.
                 </p>
                 <div class="d-flex justify-content-center gap-3">
-                    <a href="/" class="btn btn-primary">Go Home</a>
-                    <a href="/login" class="btn btn-outline-primary">Login</a>
+                    <a th:href="@{/}" class="btn btn-primary">Go Home</a>
+                    <a th:href="@{/login}" class="btn btn-outline-primary">Login</a>
                     <button onclick="history.back()" class="btn btn-outline-secondary">Go Back</button>
                 </div>
             </div>
         </div>
 
         <footer th:replace="~{fragments/layout :: footer}"></footer>
     </div>
-
-    <!-- Bootstrap JS -->
-    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.0/dist/js/bootstrap.bundle.min.js"></script>
-    
-    <!-- Bootstrap Icons -->
-    <link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap-icons@1.11.0/font/bootstrap-icons.css">
 </body>
 </html>