Redesign personal AI connection management and setup

[Maneek21]

Personal AI connections previously mixed setup, permissions, tokens, OAuth grants and developer information into one dense page. This change gives the page a searchable connection list and a separate setup flow, with access and activity available on demand.

Connections have inline revoke confirmation and recoverable error states. Setup presents a plain-language access selector, client-specific instructions, once-only token acknowledgement and verification tied to the selected connection. Drafts survive Back and Resume; completing setup clears the acknowledged credential. Partial refresh failures cannot silently appear as an empty or current inventory.

Validation: web typecheck and full web lint passed; three settings navigation tests passed; smoke-script syntax and git diff checks passed. Rendered all seven client paths at 390 and 1440 CSS px, plus expanded revocation at 320 px, and inspected dark and light layouts. Synthetic UI checks covered search, empty/loading/error recovery, token and grant revocation, failed revoke/retry, draft retention, permission validation, acknowledgement, local copy feedback, pending/observed verification and focus restoration.

The updated production smoke adds disposable seeded token issuance and revocation; its execution remains pending. Local screenshots and mutation checks used synthetic fixture data, not live OAuth or persistent credentials. Browser zoom, screen-reader acceptance, real integration evidence and independent usability review remain open.

Stacked on #323. Do not merge before user review. No merge or auto-merge is authorized.