hop.show

Dashboard locked.

Artifact URLs stay public-by-link, but the management dashboard requires the internal Hop API key.

Publishing still uses the CLI/API. Dashboard auth reuses the existing API key; no extra secret was created.