Add backups with S3, daily cost push, automation templates and a browser tool

- Daily backups (database + config) into <data_dir>/backups, keep N,
  optional upload to any S3-compatible bucket (SigV4, bucket pruning);
  settings panel with run-now, list and download
- Daily cost summary push at 20:00 (opt-in per user, preview button)
- Automations from templates (dependency check, security review, test
  health, daily summary, TODO report, docs freshness) via POST /jobs/create
- browser tool: headless Chromium over CDP – click, type, keys, waits,
  JavaScript, navigation, screenshots, console errors; requests to private
  network addresses are blocked (sub-resources and redirects included)
- Secrets masked in the config view: S3 secret key, metrics token
- Replace the remaining text arrows/refresh glyphs with SVG icons

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/src/tools/craft.rs

@@ -17,7 +17,7 @@ const SNAPSHOT_HEIGHT: u32 = 2000;
 /// Long-side limit for images sent to the model.
 const MAX_IMAGE_SIDE: u32 = 1568;
 
-fn png_for_model(img: &image::DynamicImage) -> Result<ImageData> {
+pub(crate) fn png_for_model(img: &image::DynamicImage) -> Result<ImageData> {
     let (w, h) = img.dimensions();
     let img = if w.max(h) > MAX_IMAGE_SIDE {
         img.resize(MAX_IMAGE_SIDE, MAX_IMAGE_SIDE, image::imageops::FilterType::Triangle)