Add security hardening, Ghidra, recreate skill, checkpoints, shells, web search and themes

- Sandbox (bubblewrap) for non-admin shell/git, MCP per-user rights, hard budgets and quotas,
  login rate limiting, audit log and backups
- Ghidra headless decompilation (ARM64 natives built from source), binary_info tool,
  clean room / deep workflow per session
- Recreate skill and commands for analysing and re-building old software
- File checkpoints with rewind/restore, background shells (bash_output, kill_shell)
- web_search tool (DuckDuckGo, SearXNG, Brave, Tavily)
- In-app dialogs and toasts instead of browser dialogs
- 15 base themes (trilium-themes palettes plus Nord, VS Code, GitHub, Catppuccin, One,
  Dracula, Rose Pine, Everforest, Kanagawa) with light/dark/auto switcher and license notes

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/components/settings/Folders.tsx

@@ -3,6 +3,7 @@ import { del, post, put } from "../../api";
 import { useFetch } from "../../hooks";
 import { useT } from "../../i18n";
 import type { User } from "../../types";
+import { confirmDialog, promptDialog, toast } from "../../dialogs";
 
 interface Folder {
   id: string;
@@ -44,7 +45,7 @@ export function Folders() {
           <h3>
             📁 <code>{f.path.slice(ws.length) || "/"}</code>
             <span className="spacer" />
-            <button className="small danger" onClick={() => confirm(t("folders.removeConfirm")) && run(() => del(`/folders/${f.id}`))}>
+            <button className="small danger" onClick={() => void confirmDialog({ message: t("folders.removeConfirm"), danger: true, confirmLabel: t("folders.remove") }).then((ok): unknown => ok && run(() => del(`/folders/${f.id}`)))}>
               {t("folders.remove")}
             </button>
           </h3>