fix: IPMI access for bee user + remove chart legend

- Add udev rule: /dev/ipmi0 readable by 'ipmi' group (no sudo needed)
- Add 'ipmi' group creation and bee user membership in chroot hook
- Remove legend from all charts (data shown in GPU table below)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

audit/internal/webui/server.go

@@ -625,7 +625,7 @@ func renderChartSVG(title string, datasets [][]float64, names []string, labels [
 	opt := gocharts.NewLineChartOptionWithData(datasets)
 	opt.Title = gocharts.TitleOption{Text: title}
 	opt.XAxis.Labels = sparse
-	opt.Legend = gocharts.LegendOption{SeriesNames: names}
+	opt.Legend = gocharts.LegendOption{SeriesNames: names, Show: gocharts.Ptr(false)}
 	if yMin != nil || yMax != nil {
 		opt.YAxis = []gocharts.YAxisOption{{
 			Min:            yMin,

iso/builder/config/hooks/normal/9000-bee-setup.hook.chroot

@@ -15,7 +15,8 @@ ensure_bee_console_user() {
     mkdir -p /home/bee
     chown -R bee:bee /home/bee
     echo "bee:eeb" | chpasswd
-    usermod -aG sudo,video,input,render bee 2>/dev/null || true
+    groupadd -f ipmi 2>/dev/null || true
+    usermod -aG sudo,video,input,render,ipmi bee 2>/dev/null || true
 }
 
 ensure_bee_console_user

iso/overlay/etc/udev/rules.d/99-ipmi.rules

@@ -0,0 +1,2 @@
+# Allow ipmi group to access IPMI device without root
+KERNEL=="ipmi[0-9]*", GROUP="ipmi", MODE="0660"