/* Design tokens, typography and the self-hosted fonts — the foundation shared by **all seven pages**, public ones included. Everything that is specific to the signed-in app (the nav shell, the cards, the controls) lives in base.css alongside it, which only the five authenticated pages load. The split exists because of the landing page. It is the one page seen on a cold cache by someone with no reason to wait, and shipping it the sidebar's CSS to render a hero it does not have is the kind of thing that is invisible in review and measurable on a phone. Two files also means arriving at /area-cliente from / already has this one cached. The dark-mode variable *values* are not here, only the light ones — the *selectors* differ page to page (area-cliente.html and admin.html gate theirs behind html.authenticated, since they are also login screens and must stay light until someone is signed in; index.html has no dark mode at all, deliberately). Each page declares its own; see their