Add optional DJ panel password

README.md

@@ -85,6 +85,23 @@ YOUTUBE_API_KEY=YOUR_KEY_HERE
 Notes:
 - If you don’t set `YOUTUBE_API_KEY`, you can still paste a YouTube URL directly into a deck/download box.
 
+## Optional DJ panel password (config.json)
+
+By default, anyone who can reach the DJ server (`:5000`) can open the DJ panel.
+
+If you want to lock it while you’re playing live, create a `config.json` (not committed) in the project root:
+
+```json
+{
+  "dj_panel_password": "your-strong-password"
+}
+```
+
+Behavior:
+- If `dj_panel_password` is empty/missing, the DJ panel is **unlocked** (default).
+- If set, visiting `http://<DJ_MACHINE_IP>:5000` shows a login prompt.
+- Listener (`:5001`) is not affected.
+
 ---
 
 ## Run