v0.15.3
## Added
- A "Public scoreboard" setting, off by default. While it's off, `/scoreboard`,
`/api/round/info`, `/api/checks/limited` and `/api/users/limited` need a valid session or
bearer token of any role, and the frontend sends a logged-out viewer to the login page. Admins
and black team change it from the settings page, `PATCH /api/settings` (`scoreboard_public`),
or `scoreboard_public` under `[settings]` in settings.toml. An import that leaves the key out
keeps the current value
- `GET /api/scoreboard/access` returns 204 if the caller may view the scoreboard, 401 if not
## Changed
- Labels on read-only values (settings, user and check cards, minion stats, rubric rows, check
details) are now lime captions, so they stand apart from their values. Form input labels are
unchanged
- The settings page shows each setting's current value, with a divider between settings
- Toggles take an on and an off label and keep their width when the label changes, so the switch
no longer moves on the checks and users cards
- Rubric descriptions on inject and IR rubrics are edited in a text area that grows with the text
- The "Public Scoreboard" button is now "Scoreboard"
- The SMB check's domain field is labelled "Windows AD Domain", and its placeholders no longer
use names from a past competition
## Fixed
- The toggle knob overflowed its track by 2px at the bottom, and by 2px on the right when on