fix: resolve all remaining audit failures across rust, svelte, and java

panel/web/src/components/ServerForm.svelte

@@ -1,5 +1,9 @@
 <script lang="ts">
   import { Globe, UserRound, Tag } from '@lucide/svelte';
+  import { onMount } from 'svelte';
+  import { get } from '../lib/api';
+  let instances = $state<Array<{id: string; name: string}>>([]);
+  onMount(async () => { instances = await get('/api/admin/instances'); });
   import Toggle from './Toggle.svelte';
   import type { Group, ServerDraft } from '../lib/types';
 
@@ -13,6 +17,7 @@
 </script>
 
 <label class="field">Name<input bind:value={draft.name} maxlength="48" placeholder="Survival SMP" /></label>
+<label class="field">Launcher instance<select bind:value={draft.instance_id}><option value="">Unlinked</option>{#each instances as instance}<option value={instance.id}>{instance.name}</option>{/each}</select></label>
 <div class="field">
   <span class="lbl">Who can join</span>
   <div class="opts">
@@ -38,7 +43,7 @@
 <Toggle
   bind:checked={draft.require_launcher}
   label="Must join through the launcher"
-  help="Accounts are only let in if they launched the game from the SCOPENET launcher on the same network in the last 12 hours. Useful for offline-mode servers."
+  help="Accounts are only let in if they launched the game from the SCOPENET launcher from the same IP address in the last 12 hours."
 />
 
 <style>