v0.9.0-beta — reCAPTCHA settings screen + shared writer

Added

• System settings is now tabbed — Session & Security · Email SMTP (stub) · reCAPTCHA.
• reCAPTCHA admin screen (previously config-file only): enabled, version (v2 checkbox / v3 score), site key, secret key, min score, fail-open, and a hide-the-v3-badge toggle that injects the badge-hiding CSS plus the reCAPTCHA legal notice Google requires in its place.
• Tiger_Recaptcha shared reader/writer — settings() (secret masked) and saveSettings(): writes tiger.recaptcha.* to the config tier, with the secret encrypted at rest (Tiger_Crypto; blank keeps the current one). secretKey() falls back to the encrypted value, so a no-shell operator can set it in the UI without a plaintext DB row. badgeCss() / legalNotice() centralize badge-hide behavior; Tiger_View_Helper_FormRecaptcha emits them on v3.

Notes

• Email SMTP settings remain config-driven (mail.*, read by Tiger_Mail) — the admin screen for them is stubbed "under construction."
• The same reCAPTCHA controls are surfaced by the TigerShield Security screen via the shared writer.