{#- The site header lives in `crate::shell::site_header`, which builds a
    `quasi_router::Chrome` and lets the renderer write the markup: one spelling
    for the templated pages and for a described screen that owns its own
    document. The CSRF token is not passed any more -- the logout is an htmx
    post and `htmx-glue.ts` attaches the token from the `csrf-token` meta. -#}
{{ crate::shell::site_header(session_user.as_ref())|safe }}