The project owner supplied and confirmed ownership of the Flask login/session
practical on 2026-10-13 and requested TestPyPI validation followed by PyPI
publication. The previously selected local-use license terms are retained.

Changes from the supplied practical: decoded HTML entities, formatting,
explicit loopback binding, and use_reloader=False for normal IDLE F5 execution.
The demo accounts, weak secret key, routes and session behavior are retained.
The IDLE extension is adapted from the same owner's px-idle/px-stat packages.
