feat: add keyword normalization and protection grant detection, fix template syntax and polling issues

code/web/templates/base.html

@@ -309,7 +309,8 @@
               .catch(function(){ /* noop */ });
           } catch(e) {}
         }
-        setInterval(pollStatus, 3000);
+        // Poll every 10 seconds instead of 3 to reduce server load (only for header indicator)
+        setInterval(pollStatus, 10000);
         pollStatus();
 
         // Health indicator poller

code/web/templates/build/_step5.html

@@ -462,11 +462,12 @@
   <!-- controls now above -->
 
       {% if allow_must_haves %}
-        {% include "partials/include_exclude_summary.html" with oob=False %}
+        {% set oob = False %}
+        {% include "partials/include_exclude_summary.html" %}
       {% endif %}
       <div id="deck-summary" data-summary
            hx-get="/build/step5/summary?token={{ summary_token }}"
-           hx-trigger="load, step5:refresh from:body"
+           hx-trigger="load once, step5:refresh from:body"
            hx-swap="outerHTML">
         <div class="muted" style="margin-top:1rem;">
           {% if summary_ready %}Loading deck summary…{% else %}Deck summary will appear after the build completes.{% endif %}

code/web/templates/setup/running.html

@@ -127,7 +127,8 @@
       .then(update)
       .catch(function(){});
   }
-  setInterval(poll, 3000);
+  // Poll every 5 seconds instead of 3 to reduce server load
+  setInterval(poll, 5000);
   poll();
 })();
 </script>