Do Nothing now does nothing

Saved keys now display as a password field with the last 4 characters visible and an eye toggle. No more exposing the whole key on a screenshare.

Portfolios set to "Do Nothing" on non-compliance were getting stocks liquidated anyway. The refresh service was using all non-compliant symbols instead of only the ones your setting allows. A user reported it and was completely right. If you turn auto-liquidation off, it now stays off
Fund URLs that don't exist now show a clean not-found page instead of a React crash
Script updates to keep the genocide filter charts on the blog accurate as the BDS list evolves