Add security hardening, Ghidra, recreate skill, checkpoints, shells, web search and themes

- Sandbox (bubblewrap) for non-admin shell/git, MCP per-user rights, hard budgets and quotas,
  login rate limiting, audit log and backups
- Ghidra headless decompilation (ARM64 natives built from source), binary_info tool,
  clean room / deep workflow per session
- Recreate skill and commands for analysing and re-building old software
- File checkpoints with rewind/restore, background shells (bash_output, kill_shell)
- web_search tool (DuckDuckGo, SearXNG, Brave, Tavily)
- In-app dialogs and toasts instead of browser dialogs
- 15 base themes (trilium-themes palettes plus Nord, VS Code, GitHub, Catppuccin, One,
  Dracula, Rose Pine, Everforest, Kanagawa) with light/dark/auto switcher and license notes

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/themes/index.ts

@@ -2,3 +2,31 @@
 import "./base.css";
 import "./gruvbox-dark.css";
 import "./gruvbox-light.css";
+import "./ash-dark.css";
+import "./ash-light.css";
+import "./harbor-dark.css";
+import "./harbor-light.css";
+import "./coffee-dark.css";
+import "./coffee-light.css";
+import "./solarized-dark.css";
+import "./solarized-light.css";
+import "./tokyonight-dark.css";
+import "./tokyonight-light.css";
+import "./nord-dark.css";
+import "./nord-light.css";
+import "./vscode-dark.css";
+import "./vscode-light.css";
+import "./github-dark.css";
+import "./github-light.css";
+import "./catppuccin-dark.css";
+import "./catppuccin-light.css";
+import "./one-dark.css";
+import "./one-light.css";
+import "./dracula-dark.css";
+import "./dracula-light.css";
+import "./rosepine-dark.css";
+import "./rosepine-light.css";
+import "./everforest-dark.css";
+import "./everforest-light.css";
+import "./kanagawa-dark.css";
+import "./kanagawa-light.css";