dashboard now owned by env
factor out fetch dashboard and switch to dev_json_response for those hard-to-json-serialize objects
note a couple bugs in the TODO
more fetch dashboard stuff