Varaverk: arrange mode, folder management, rsync standalone, layout fixes

Scheduler UI:
- Arrange mode: drag scripts between orchs and reorder within arrays; right
  panel shows unassigned script pool; Save Arrangement commits to master.conf
- + Folder: named collapsible subfolders for Custom Scripts stored in schedule.json
- Rsync children: hide Run/Dry Run/Log/location when orch is ON; show standalone
  location + cron controls when orch is OFF; cron only fires when both filled
- Non-conf-managed children (transcode): toggles now show enabled when orch is on
- Right panel height sync: fix ResizeObserver feedback loop via align-self:flex-start
  on left panel and left.offsetHeight in vvFitRight
- How do I use this: updated to cover arrange, folders, rsync standalone, transcode

New API endpoints:
- board.php, clearlock.php, movescript.php, rawconf.php, readscript.php
- reorderarray.php, rsync_standalone.php, savefolders.php

run.php / dryrun.php: accept optional --location= arg for standalone rsync calls

Plugin/usr/local/emhttp/plugins/varaverk/api/rsync_standalone.php

@@ -0,0 +1,47 @@
+<?php
+// Save rsync standalone config (location + cron) for a specific rsync tier.
+// POST: flag_name (e.g. "DAILY_RSYNC_ENABLED"), orch_id, location, cron
+// Stored in schedule.json under "__rsync_{FLAG_NAME}".
+// Triggers a cron rebuild so the standalone entry takes effect immediately.
+header('Content-Type: application/json');
+require_once dirname(__DIR__) . '/include/config.php';
+require_once dirname(__DIR__) . '/include/scheduler.php';
+
+if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
+    echo json_encode(['ok' => false, 'error' => 'POST only']);
+    exit;
+}
+
+$flagName = trim($_POST['flag_name'] ?? '');
+$orchId   = trim($_POST['orch_id']   ?? '');
+$location = trim($_POST['location']  ?? '');
+$cron     = trim($_POST['cron']      ?? '');
+
+if (!$flagName || !preg_match('/^[A-Z_]+_RSYNC_ENABLED$/', $flagName)) {
+    echo json_encode(['ok' => false, 'error' => 'Invalid flag_name']);
+    exit;
+}
+if ($orchId && (str_contains($orchId, '..') || !preg_match('/^[A-Za-z0-9_.\-\/]+\.sh$/', $orchId))) {
+    echo json_encode(['ok' => false, 'error' => 'Invalid orch_id']);
+    exit;
+}
+if ($location && (!str_starts_with($location, '/') || str_contains($location, '..') || preg_match('/[\x00\n\r]/', $location))) {
+    echo json_encode(['ok' => false, 'error' => 'Invalid location']);
+    exit;
+}
+
+$key      = '__rsync_' . $flagName;
+$schedule = vv_schedule_load();
+$schedule[$key] = [
+    'flag_name' => $flagName,
+    'orch_id'   => $orchId,
+    'location'  => $location,
+    'cron'      => $cron,
+];
+if (!vv_schedule_save($schedule)) {
+    echo json_encode(['ok' => false, 'error' => 'Write failed']);
+    exit;
+}
+
+vv_cron_rebuild($schedule);
+echo json_encode(['ok' => true]);