snapshot: preserve session hardening and account surface

backend/workflows/branding.py

@@ -10,6 +10,10 @@ from django.utils.translation import get_language
 
 from .models import PortalBranding, PortalCompanyConfig, PortalTrialConfig
 
+# Branding is the product/deployment boundary.
+# Workdock is the generic default, while stored DB values preserve the current
+# customer deployment identity such as TUBCO.
+
 
 def get_portal_branding() -> PortalBranding:
     branding, _ = PortalBranding.objects.get_or_create(
@@ -118,6 +122,8 @@ def get_portal_logo_url() -> str:
             return branding.logo_image.url
         except ValueError:
             pass
+    # The fallback asset file is still the historical TUBCO wordmark. A later
+    # asset refresh can replace the file without changing the branding contract.
     return static('workflows/img/tubco-logo.svg')
 
 
@@ -128,6 +134,7 @@ def get_portal_favicon_url() -> str:
             return branding.favicon_image.url
         except ValueError:
             pass
+    # Same fallback rule as the logo: keep runtime stable now, replace asset later.
     return static('workflows/img/tubco-logo.svg')