FM-940 — Settings pages #143

Epic: #122 · Depends on: FM-901

Context

Integration status and controller configuration are spread across panels and CLI.

Goal

Settings sections: General, Appearance, Security & access (trusted-LAN warning), Integrations (Proxmox, Tailscale, Packer, GitHub, Skills Manager/Frogenv/mise detection), Credentials (names/dates only, write-only secrets), SSH & host keys, fleetd & enrollment, Lab defaults, Desired state, Backups, Diagnostics.

Architecture reference

docs/planning/web-console.md (Settings); mockup settings.html.

Dependencies

FM-901

Research required

None.

Acceptance criteria

• Secrets are never readable from the UI; only existence and set/rotated time
• Sections without backing API show read-only status rather than invented controls

Non-goals

• New config storage

Tests

Component tests; e2e for Tailscale configure/remove.