static WEB: OnceLock<WebOptions>
--frontend-dir / --allowed-origin, held in-process like the ports.
--frontend-dir
--allowed-origin