v1.2.0 — single cloud-sync page

v1.2.0 — single cloud-sync page, verified in a live deployment

The settings page is now cloud sync only: the tab strip is gone, cloud sync is
the whole page, and this machine's routes sit below it as a compact read-only
summary (name, endpoint, model count) with only Export and Restore.

The cloud panel is denser: the backend selector and Save share a header, one
save writes configuration and secret, the three options and three actions each
fit on one row, and the status detail is collapsed.

Also fixes four defects that only a real DSH instance exposed:

• every config field is volatile, so the settings service accepts writes and
  the cloud panel is no longer read-only behind a generic rejection;
• a command leaves the settings editor's HMR transaction before writing status,
  so actions finish instead of hanging on "working…";
• llmEntryId is unwrapped from the schemastery row, so actions address the
  right namespace;
• S3 access keys are used as typed, including all-caps literals such as
  AKIATEST, and fall back to the environment only when empty.

Tests: 116 host + 91 client, all passing.

v1.1.0 — model config + API key sync

v1.1.0 — API key sync, auto sync, transfer serialization

First public release: syncs model configuration and the third-party API keys
behind it over S3-compatible storage or WebDAV, with per-route merge and
three-way conflict refusal on both routes and keys.