favicon: canvas center is (8, 8)

templates: add rv-style-* binder, use it for progress bar

templates: update uikit to 2.27.2

provision: more security headers

provision: use the usual set of X-headers in /http-bind proxy block

provision: specify revision for extra prosody modules

pipelines: re-enable idempotence testing

pipelines: skip ufw

pipelines: piping to grep means no way to debug, ugh

pipelines: only some tags/roles are currently idempotent 'common' uses command module for setting system locale, and for some reason service module (in post_tasks) thinks prosody needs enabling every time.