Auth stack certs tab, arrs db fallbacks, cert monitor cache, conf parser fix

- Auth stack: fold cert monitor into Auth Stack page as fourth tab (Certs);
  remove standalone cert page and top-level tab
- cert_monitor.sh: write JSON status cache to State_Files/cert_status.json
  after each run; expose per-domain days/expiry via _CERT_DAYS/_CERT_EXPIRY globals
- api/cert.php: new — serves cached cert status; falls back to configured
  domains as UNKN when no cache exists; POST action=run triggers live check
- arrs db fallbacks: vv_arr_cleanup_stats/discovery_stats/recovery_stats now
  read from data/*.db files when log JSON files don't yet exist
- config.php vv_conf_vars(): unescape bash \$ → $ so passwords with dollar
  signs read correctly from conf files
- host1.conf: fill in HOST1_NPM_USER/PASS and HOST1_LLDAP_USER/PASS
- Partnership adapter pattern: Unraid-specific container logic extracted to
  Plugin/unraid/Partnership/; platform-agnostic structure stays in Partnership/
- First-run wizard: uniform multi-step flow for all hosts; HOST2 pull moved
  to checklist; auto SSH keygen and API key creation on save
- api/checklist.php: live setup checklist with pull_master action
- Fullscreen toggle: hide Unraid header/menu; state persists via localStorage

Monitors/cert_monitor.sh

@@ -162,6 +162,8 @@ fi
 check_cert() {
     local domain="$1"
     local port="${2:-443}"
+    _CERT_DAYS=""
+    _CERT_EXPIRY=""
 
     local expiry_str
     expiry_str=$(echo | timeout "$CERT_TIMEOUT" openssl s_client \
@@ -186,6 +188,8 @@ check_cert() {
     now=$(date +%s)
     days_remaining=$(( (expiry_epoch - now) / 86400 ))
     expiry_display=$(date -d "$expiry_str" '+%Y-%m-%d' 2>/dev/null)
+    _CERT_DAYS=$days_remaining
+    _CERT_EXPIRY=$expiry_display
 
     if [[ "$days_remaining" -le "$CERT_CRIT_DAYS" ]]; then
         error "$ICON_CERT $domain — CRITICAL: ${days_remaining} days remaining (expires $expiry_display)"
@@ -214,12 +218,14 @@ HEALTHY=()
 WARNING=()
 CRITICAL=()
 FAILED=()
-declare -A DOMAIN_STATUS
+declare -A DOMAIN_STATUS DOMAIN_DAYS DOMAIN_EXPIRY
 
 for domain in "${CERT_MONITOR_DOMAINS[@]}"; do
     [[ -z "$domain" ]] && continue
     check_cert "$domain"
     result=$?
+    DOMAIN_DAYS["$domain"]="${_CERT_DAYS:-}"
+    DOMAIN_EXPIRY["$domain"]="${_CERT_EXPIRY:-}"
     case $result in
         0) HEALTHY+=("$domain");  DOMAIN_STATUS["$domain"]="OK" ;;
         1) WARNING+=("$domain");  DOMAIN_STATUS["$domain"]="WARN" ;;
@@ -280,5 +286,24 @@ else
 fi
 echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
 
+# ── Write JSON status cache ───────────────────────────────────────────────────
+_CERT_CACHE_FILE="$SCRIPTS_DIR/State_Files/cert_status.json"
+{
+    printf '{"checked_at":%d,"host":"%s","warn_days":%d,"crit_days":%d,"dry_run":%s,"domains":[\n' \
+        "$(date +%s)" "$MY_ID" "$CERT_WARN_DAYS" "$CERT_CRIT_DAYS" \
+        "$([[ $DRY_RUN == true ]] && echo true || echo false)"
+    _first=true
+    for _d in "${CERT_MONITOR_DOMAINS[@]}"; do
+        [[ -z "$_d" ]] && continue
+        [[ "$_first" != true ]] && printf ','
+        _first=false
+        _days="${DOMAIN_DAYS[$_d]:-null}"
+        _exp="${DOMAIN_EXPIRY[$_d]:-}"
+        printf '{"domain":"%s","status":"%s","days":%s,"expires":"%s"}\n' \
+            "$_d" "${DOMAIN_STATUS[$_d]:-UNKN}" "$_days" "$_exp"
+    done
+    printf ']}\n'
+} > "$_CERT_CACHE_FILE" 2>/dev/null
+
 [[ ${#CRITICAL[@]} -gt 0 || ${#FAILED[@]} -gt 0 ]] && exit 1
 exit 0