Web UI: Jarl logo and wordmark

Add the logo, a Viking jarl drawn like a woodcut whose spear-pointed crown
holds a DNS tree. It is generated by scripts/logo.py, which mirrors the
left half so the figure is exactly symmetrical, as logo.svg (white on a
Nordic-blue disc) and logo-white.svg. It links home in the header, sits on
the login page and is the favicon.

The login page shows an angular "JARL" wordmark drawn as SVG paths over a
rule with a "DNS" node, coloured from the theme. The header's "Jarl" uses
a self-hosted Cinzel Bold subset (SIL OFL); jarld serves .woff2 as
font/woff2.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/development.md

@@ -75,7 +75,14 @@ to that directory's `cli.yaml` to keep using the CLI against it.
 ### The web UI
 
 The UI is plain JavaScript modules under `internal/web/static/`, with no
-framework and no build step. All DOM is built with the `h()` helper in
+framework and no build step. The logo is `assets/logo.svg` (a white figure on
+a Nordic-blue `#2f5fb3` disc) with an all-white variant
+`assets/logo-white.svg`. Both are generated by `scripts/logo.py` (shapes are
+given for the left half and mirrored); edit the script, not the SVGs. The
+login page's "JARL" wordmark is drawn as SVG paths in `assets/brand.js`, so
+it needs no font and takes the theme's text and accent colors. The header's
+"Jarl" uses a Latin subset of Cinzel Bold in `assets/fonts/` (SIL OFL; keep
+`Cinzel-OFL.txt` next to it). All DOM is built with the `h()` helper in
 `ui.js`, which never uses `innerHTML`, so record data and comments can't
 inject markup. The Content-Security-Policy only allows the app's own
 scripts and styles. To work on it, run jarld and reload the browser: the