Load startup vendor scripts with defer and serve Bootstrap locally so the first WebUI mount no longer depends on a parser-blocking CDN request.
Add a focused regression that rejects undeferred classic startup scripts in index.html and documents the vendor/startup contract.
