Auth stack certs tab, arrs db fallbacks, cert monitor cache, conf parser fix

- Auth stack: fold cert monitor into Auth Stack page as fourth tab (Certs);
  remove standalone cert page and top-level tab
- cert_monitor.sh: write JSON status cache to State_Files/cert_status.json
  after each run; expose per-domain days/expiry via _CERT_DAYS/_CERT_EXPIRY globals
- api/cert.php: new — serves cached cert status; falls back to configured
  domains as UNKN when no cache exists; POST action=run triggers live check
- arrs db fallbacks: vv_arr_cleanup_stats/discovery_stats/recovery_stats now
  read from data/*.db files when log JSON files don't yet exist
- config.php vv_conf_vars(): unescape bash \$ → $ so passwords with dollar
  signs read correctly from conf files
- host1.conf: fill in HOST1_NPM_USER/PASS and HOST1_LLDAP_USER/PASS
- Partnership adapter pattern: Unraid-specific container logic extracted to
  Plugin/unraid/Partnership/; platform-agnostic structure stays in Partnership/
- First-run wizard: uniform multi-step flow for all hosts; HOST2 pull moved
  to checklist; auto SSH keygen and API key creation on save
- api/checklist.php: live setup checklist with pull_master action
- Fullscreen toggle: hide Unraid header/menu; state persists via localStorage

Deployment/conf_templates/master.conf

@@ -283,7 +283,7 @@
     ARRAY_START_SCRIPTS=(
         "Transcodes/ramdisk_setup.sh"                 # creates ramdisk + symlink before Emby starts
         "System_Essentials/docker_syslog_filter.sh"   # suppress veth noise before logs fill
-        "System_Essentials/php_fpm_max_children.sh"   # WebGUI performance tuning
+        "Plugin/unraid/System_Essentials/php_fpm_max_children.sh"   # WebGUI performance tuning
         "System_Essentials/inotify_tuning.sh"         # bump inotify limits — containers miss events if exhausted
         "Docker_Essentials/docker_network_connect.sh" # ensure networks exist + connect containers
         "Fallback/fallback.sh"                        # mutual failover — continuous
@@ -294,10 +294,10 @@
 # Run sequentially (foreground) — each must complete before the next starts.
 # Order matters: user scripts first (prevents new ops), then data movement, then containers.
     ARRAY_STOP_SCRIPTS=(
-        "System_Essentials/user_scripts_stop.sh"        # stop background scripts before they start new ops
+        "Plugin/unraid/System_Essentials/user_scripts_stop.sh"        # stop background scripts before they start new ops
         "Fallback/fallback.sh --stop"                   # gracefully stop fallback (not caught by user_scripts_stop)
         "System_Essentials/rsync_stop.sh --rsync-only"  # kill rsync; skip container recovery (handled below)
-        "System_Essentials/mover_stop.sh"               # stop mover after rsync (they conflict on same files)
+        "Plugin/unraid/System_Essentials/mover_stop.sh"               # stop mover after rsync (they conflict on same files)
         "Docker_Essentials/docker_container_stop.sh"    # stop all containers last
     )
 
@@ -319,7 +319,7 @@
 # Called by watchdog_orchestrator.sh — not scheduled directly.
     SYSTEM_WATCHDOG_SCRIPTS=(
         "Watchdogs/System/storage_watchdog.sh"   # pool growth + runaway log detection
-        "Watchdogs/System/webgui_watchdog.sh"    # WebGUI availability — nginx → php-fpm → emhttp
+        "Plugin/unraid/Watchdogs/System/webgui_watchdog.sh"    # WebGUI availability — nginx → php-fpm → emhttp
         "Watchdogs/System/network_watchdog.sh"   # internet, DDNS, Tailscale, NPM proxy
     )