Add API tokens, CLI server API and shared core crate

- Personal API tokens (full/read scope, expiry, revoke) and CLI password login
- Cargo workspace: codecraft-core (types, providers, permission rules) shared by
  server and the upcoming terminal client; server re-exports the old paths
- CLI server API: /cli/config, /cli/skill, /cli/tool (server MCP tools),
  /llm/stream model gateway with budgets and usage per user
- Theme/language preferences mirrored to the server; personal memory endpoint
- Statistics: provider and mode tables stacked; CLI usage labelled
- cli/: work in progress (terminal client is being rewritten as a local TUI)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

web/src/components/Stats.tsx

@@ -253,15 +253,13 @@ export function Stats({ onMenu }: { onMenu: () => void }) {
                     <h3>{t("stats.byModel")}</h3>
                     <AggTable rows={data.by_model} keyName="model" label={t("stats.model")} currency={cur} />
                   </div>
-                  <div className="two-col">
-                    <div className="panel">
-                      <h3>{t("stats.byProvider")}</h3>
-                      <AggTable rows={data.by_provider} keyName="provider" label={t("stats.provider")} currency={cur} />
-                    </div>
-                    <div className="panel">
-                      <h3>{t("stats.byAgent")}</h3>
-                      <AggTable rows={data.by_agent} keyName="agent" label={t("stats.agent")} currency={cur} />
-                    </div>
+                  <div className="panel">
+                    <h3>{t("stats.byProvider")}</h3>
+                    <AggTable rows={data.by_provider} keyName="provider" label={t("stats.provider")} currency={cur} />
+                  </div>
+                  <div className="panel">
+                    <h3>{t("stats.byAgent")}</h3>
+                    <AggTable rows={data.by_agent} keyName="agent" label={t("stats.agent")} currency={cur} />
                   </div>
                   {isAdmin && !userFilter && data.by_user.length > 1 && (
                     <div className="panel">
@@ -271,7 +269,7 @@ export function Stats({ onMenu }: { onMenu: () => void }) {
                   )}
                   <div className="panel">
                     <h3>{t("stats.topSessions")}</h3>
-                    <AggTable rows={data.top_sessions} keyName="title" label={t("stats.session")} currency={cur} link={(r) => navigate(`/s/${r.session_id}`)} />
+                    <AggTable rows={data.top_sessions} keyName="title" label={t("stats.session")} currency={cur} link={(r) => !r.session_id.startsWith("cli:") && navigate(`/s/${r.session_id}`)} />
                   </div>
                 </>
               )}