TunnelStoreProvisioner expands bare hosts to http:// for unsecure and https:// for optional secure; full URLs still work. Tunnel block strips scheme for prefill display. Update tunnel template copy, Index error text, and README/docs.