fix: align dashboard host warnings with effective bind

ui/README.md

@@ -19,13 +19,20 @@ bun run dev
 ```
 
 This starts the CCS server, opens a local browser URL, and prints bind/network details for the dashboard.
+If the runtime bind is reachable beyond loopback, CCS also prints an auth reminder.
 
-For LAN access during development, run:
+For remote device access during development, run:
 
 ```bash
 bun run dev -- --host 0.0.0.0
 ```
 
+For local-only development, run:
+
+```bash
+bun run dev -- --host 127.0.0.1
+```
+
 From `ui/` only (frontend dev server):
 
 ```bash