Add API tokens, CLI server API and shared core crate

- Personal API tokens (full/read scope, expiry, revoke) and CLI password login
- Cargo workspace: codecraft-core (types, providers, permission rules) shared by
  server and the upcoming terminal client; server re-exports the old paths
- CLI server API: /cli/config, /cli/skill, /cli/tool (server MCP tools),
  /llm/stream model gateway with budgets and usage per user
- Theme/language preferences mirrored to the server; personal memory endpoint
- Statistics: provider and mode tables stacked; CLI usage labelled
- cli/: work in progress (terminal client is being rewritten as a local TUI)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/App.tsx

@@ -14,6 +14,7 @@ import { Images } from "./components/Images";
 import { Jobs } from "./components/Jobs";
 import { Spinner, useTitleActivity } from "./components/Activity";
 import { DialogHost } from "./dialogs";
+import { startPrefsSync } from "./prefsSync";
 
 // The file manager (editor, git) is loaded on demand to keep the chat small.
 const Files = lazy(() => import("./components/Files").then((m) => ({ default: m.Files })));
@@ -31,7 +32,10 @@ export function App() {
     try {
       const i = await get<Info>("/info");
       setState(() => ({ me: i.user }));
-      if (i.user) await loadSessions();
+      if (i.user) {
+        await loadSessions();
+        void startPrefsSync();
+      }
       setInfo(i);
     } catch (e: any) {
       setError(e.message);