feat: fleet ops, KEV scan, tunnels, beacon fallback, persistence

Extend owned-fleet control with scheduled tasks, audit log, file browser,
HTTPS beacon when WS drops, protocol tunnels, registry/autostart forge
options, KEV exposure in full sys check with Telegram alerts, and UI/tests.

server/web/src/test/setup.ts

@@ -1 +1,9 @@
+import { vi, beforeEach } from 'vitest';
+
 import '@testing-library/jest-dom/vitest';
+
+beforeEach(() => {
+  if (typeof Element !== 'undefined') {
+    Element.prototype.scrollIntoView = vi.fn();
+  }
+});