chore: sync CI/CD with upstream guide and update context docs

release.yml: add fallback for existing releases on tag re-push.
installer.nsi: add .onInit file lock check, use LaunchApp function
instead of RUN_PARAMETERS to fix NSIS quoting bug.
build-dist.ps1: copy start-hidden.vbs to dist scripts/.
start-hidden.vbs: embedded Python fallback for installed/dev envs.

Update ci-cd.md with version detection, NSIS best practices, local
build testing, Gitea vs GitHub differences, troubleshooting.
Update frontend.md with full entity type checklist and common pitfalls.

build-dist-windows.sh

@@ -228,6 +228,8 @@ WIN_DEPS=(
     "winrt-Windows.Foundation>=3.0.0"
     "winrt-Windows.Foundation.Collections>=3.0.0"
     "winrt-Windows.ApplicationModel>=3.0.0"
+    # System tray
+    "pystray>=0.19.0"
 )
 
 # Download cross-platform deps (prefer binary, allow source for pure Python)
@@ -359,7 +361,6 @@ echo "[8b/9] Creating launcher and packaging..."
 
 cat > "$DIST_DIR/LedGrab.bat" << LAUNCHER
 @echo off
-title LedGrab v${VERSION_CLEAN}
 cd /d "%~dp0"
 
 :: Set paths
@@ -370,15 +371,17 @@ set WLED_CONFIG_PATH=%~dp0app\config\default_config.yaml
 if not exist "%~dp0data" mkdir "%~dp0data"
 if not exist "%~dp0logs" mkdir "%~dp0logs"
 
-:: Start the server — reads port from config, prints its own banner
-"%~dp0python\python.exe" -m wled_controller.main
-
-pause
+:: Start the server (tray icon handles UI and exit)
+"%~dp0python\pythonw.exe" -m wled_controller
 LAUNCHER
 
 # Convert launcher to Windows line endings
 sed -i 's/$/\r/' "$DIST_DIR/LedGrab.bat"
 
+# Copy hidden launcher VBS
+mkdir -p "$DIST_DIR/scripts"
+cp server/scripts/start-hidden.vbs "$DIST_DIR/scripts/"
+
 # ── Create autostart scripts ─────────────────────────────────
 
 cat > "$DIST_DIR/install-autostart.bat" << 'AUTOSTART'