A third server source loads a read-only inventory from an https:// URL —
a shared "single source of truth" for a team. Security model: inventory
only (groups/names/host/port); commands are never honored from the
network (decoded with allowCommands: false). The list is cached locally
for offline use.

Because the remote list carries no user and no favorites, each person
keeps their own *locally* (sidecar files keyed by host:port, kept across
reloads): a login user (on top of a new global default-user setting) and
favorites. A consistent "Edit servers…" editor mirrors the JSON editor.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>