OpenClaw non-loopback Control UI requires gateway.controlUi.allowedOrigins

Diagnosis

Gateway crash loop after upgrade with gateway.bind lan. New security requirement in v2026.2.26.

Fix

Add allowedOrigins to gateway.controlUi in openclaw.json. Always chown openclaw:openclaw after root edits.