Backlog: P0 Done entry updated for GitHub-only consumer chain

BACKLOG.md

@@ -134,12 +134,15 @@ Status: TODO / IN PROGRESS / DONE / BLOCKED.
   deploy key, 180-day retention) + history read side (Trends, P1) + **live chain
   (`feature/p0-live-chain`)**: `MirrorFuelProvider` fetches CURRENT prices from
   raw.githubusercontent (latest.json → history/<day>.json, app-group day-cache) →
-  LAN relay fallback → bundled REAL dump (`FuelBoardDump` dataset, refreshed by
-  `scripts/refresh_bundled_dump.sh`) last resort; focused alert path stays
-  relay-first (never pulls the 2.8 MB dump over mobile); `FuelBeacon` fire-and-
-  forget X-Client app ping on the relay's existing widget-diag route (zero relay
-  changes) = attribution/cadence on-LAN, silent off-LAN skip = reachability
-  datum, `/stats` app-hit spike = GitHub path failing. 89 tests.
+  **GitHub FIRST everywhere** (alert checks + widget too — the relay is
+  unreachable from any consumer phone and attempting it would fire the Local
+  Network prompt); LAN relay joins ONLY behind the hidden dev flag
+  `fuelboard.relayFallback` (Settings → Debug, off by default); bundled REAL
+  dump (`FuelBoardDump` dataset, refreshed by `scripts/refresh_bundled_dump.sh`)
+  is the app's no-network last resort. `FuelBeacon` fire-and-forget X-Client app
+  ping fires only with the dev flag on. **Local Network permission removed from
+  onboarding entirely** — data page is informational, replay on cellular can no
+  longer hang. 95 tests.
 - [x] Switch dataset to govuk API data — official Fuel Finder OAuth API via
   relay-api :8789 (source: api, ~8,012 stations); app baseURL → :8789; credentials
   live in relay `.env` only, never in the IPA