Honor saved WebUI off during unconfigured boot setup

An enabled MQTT bridge without a saved SSID forced WebConfig back on at boot,
even after set webui off. Its setup AP also suspended an enabled ESP-NOW bridge.

Use first-time MQTT setup as the default only when no WebUI choice is saved.
Apply the saved on/off setting afterward in Repeater and Room Server. Preserve
first-time provisioning and explicit starts.

Add executable boot regressions for both roles with unset, on and off WebUI
settings and configured/unconfigured WiFi. Update setup and picker guidance.

docs/WiFi.md

@@ -194,8 +194,9 @@ absolute 30-minute window. Browser activity or a phone left associated with the
 AP does not extend it. If no SSID has been saved when the window expires,
 WebConfig closes and the ESP32 WiFi radio remains off automatically for the
 remainder of that boot. A reboot or power cycle starts a new 30-minute setup
-window; the timeout is deliberately not written to preferences. An
-administrator can still override the automatic cutoff with an explicit
+window unless `set webui off` has been saved. That choice prevents automatic
+setup even without WiFi credentials. The timeout itself is not saved.
+An administrator can still override the automatic cutoff with an explicit
 `start webconfig` command.
 
 Once an SSID is saved, the provisioning cutoff no longer applies. When WiFi is

docs/_javascript/firmware_picker.js

@@ -2175,7 +2175,7 @@
         "Use get logging.output and set logging.output off|usb|wifi|both to choose the saved output mode. Avoid both when two consumers publish the same packets to one broker."
       );
       extra.push(
-        "With no saved SSID, the setup AP stays available for 30 minutes after each boot, then Wi-Fi powers off automatically until reboot or an explicit start webconfig command. A configured Wi-Fi mode keeps reconnecting instead."
+        "With no saved SSID, automatic setup offers a 30-minute AP window per boot. Use set webui off to disable automatic setup after reboot. An explicit start webconfig command can reopen it. A configured Wi-Fi mode keeps reconnecting instead."
       );
     } else if (profile.logging === "usb-runtime") {
       if (!isFullCompanion(profile)) {

docs/cli_commands.md

@@ -326,7 +326,10 @@ folder transport.
 again after future reboots; `set webui off` closes it and disables that boot
 start. `get webui` reports the saved on/off state plus whether the portal is
 inactive, joining WiFi, serving a setup AP, or serving a LAN URL. The default is
-`off` on repeater and room-server builds. On display-equipped repeaters, an
+`off` on repeater and room-server builds. An unconfigured MQTT node can open
+first-time setup while no WebUI choice has been saved. An explicit
+`set webui off` prevents that AP from returning after reboot and pausing
+ESP-NOW. On display-equipped repeaters, an
 otherwise-unused triple click toggles the same saved setting.
 Consequently, `> off, http://192.168.1.130/` means the saved boot setting is
 off while a temporary WebConfig session is currently active at that URL.
@@ -355,9 +358,10 @@ saved `webui on`.)
 LAN mode otherwise remains active until reboot. On expanded FULL builds, an
 unconfigured automatic setup AP receives one absolute 30-minute window per
 boot, then powers WiFi off even if a client remains attached; rebooting starts
-a new automatic window. An administrator can explicitly run `start webconfig`
-again without rebooting. Once an SSID is saved, the cutoff no longer applies
-and the selected WiFi/MQTT mode keeps reconnecting. Other setup sessions retain
+a new automatic window unless `webui off` is saved. An administrator can
+explicitly run `start webconfig` again without rebooting. Once an SSID is saved,
+the cutoff no longer applies and the selected WiFi/MQTT mode keeps reconnecting.
+Other setup sessions retain
 their profile's idle timeout.
 
 Full Repeater and Room Server suspend unconfigured network bridges during

docs/firmware_picker.md

@@ -305,7 +305,9 @@ the no-output and USB settings because `set usb.logging off|on` is persistent.
 On a fresh unified FULL install with no saved SSID, the setup AP and WiFi radio
 remain available for 30 minutes per boot, then turn off automatically until the
 next reboot or power cycle. An explicit administrator `start webconfig` remains
-available as an override. A saved SSID switches to the normal indefinite
+available as an override. Save `set webui off` to close the portal and prevent
+its automatic return after reboot, including on an ESP-NOW node without WiFi
+credentials. A saved SSID switches to the normal indefinite
 reconnect behavior instead.
 
 Fresh ESP32 Full infrastructure defaults to USB logging off. Existing saved