fix: keep Alta bearer out of proxy command lines

index.html

@@ -74,6 +74,11 @@
                             <label for="selectedDeviceId">Device UUID:</label>
                             <input type="text" id="selectedDeviceId" placeholder="Select a device from the list" readonly>
                         </div>
+                        <div class="input-row">
+                            <label for="altaUsername">Alta username / email:</label>
+                            <input type="text" id="altaUsername" maxlength="254" placeholder="name@example.com" autocomplete="username" spellcheck="false">
+                        </div>
+                        <p class="section-help">The proxy helper opens a Windows console and prompts for your password and 2FA. APT never sends those secrets on its command line.</p>
                         <div class="proxy-buttons">
                             <button type="button" id="startProxyBtn" class="btn-primary" disabled>Start Proxy</button>
                             <button type="button" id="stopProxyBtn" class="btn-outline" disabled>Stop Proxy</button>
@@ -97,6 +102,7 @@
         </div>
     </div>
 
+    <script src="renderer-controller.js"></script>
     <script src="renderer.js"></script>
 </body>
 </html>