Auth stack certs tab, arrs db fallbacks, cert monitor cache, conf parser fix

- Auth stack: fold cert monitor into Auth Stack page as fourth tab (Certs);
  remove standalone cert page and top-level tab
- cert_monitor.sh: write JSON status cache to State_Files/cert_status.json
  after each run; expose per-domain days/expiry via _CERT_DAYS/_CERT_EXPIRY globals
- api/cert.php: new — serves cached cert status; falls back to configured
  domains as UNKN when no cache exists; POST action=run triggers live check
- arrs db fallbacks: vv_arr_cleanup_stats/discovery_stats/recovery_stats now
  read from data/*.db files when log JSON files don't yet exist
- config.php vv_conf_vars(): unescape bash \$ → $ so passwords with dollar
  signs read correctly from conf files
- host1.conf: fill in HOST1_NPM_USER/PASS and HOST1_LLDAP_USER/PASS
- Partnership adapter pattern: Unraid-specific container logic extracted to
  Plugin/unraid/Partnership/; platform-agnostic structure stays in Partnership/
- First-run wizard: uniform multi-step flow for all hosts; HOST2 pull moved
  to checklist; auto SSH keygen and API key creation on save
- api/checklist.php: live setup checklist with pull_master action
- Fullscreen toggle: hide Unraid header/menu; state persists via localStorage

Plugin/unraid/api/cert.php

@@ -0,0 +1,91 @@
+<?php
+header('Content-Type: application/json');
+require_once dirname(__DIR__) . '/include/config.php';
+
+$action = ($_SERVER['REQUEST_METHOD'] === 'POST')
+    ? trim($_POST['action'] ?? '')
+    : trim($_GET['action'] ?? '');
+
+$cacheFile = STATE_DIR . '/cert_status.json';
+
+// ── Read configured domains (without running checks) ─────────────────────────
+if ($action === 'domains') {
+    $hostId   = vv_detect_host();
+    $hostIdUp = strtoupper($hostId);
+    $confRaw  = ($hostId !== 'unknown') ? vv_read_conf_raw($hostId . '.conf') : '';
+    $master   = vv_read_conf_raw('master.conf');
+
+    // Extract CERT_WARN_DAYS / CERT_CRIT_DAYS from master
+    preg_match('/^\s*CERT_WARN_DAYS\s*=\s*(\d+)/m', $master, $w);
+    preg_match('/^\s*CERT_CRIT_DAYS\s*=\s*(\d+)/m', $master, $c);
+
+    // Extract domains array from host conf
+    $domains = [];
+    if (preg_match('/' . $hostIdUp . '_CERT_MONITOR_DOMAINS\s*=\s*\(([^)]*)\)/s', $confRaw, $dm)) {
+        preg_match_all('/"([^"]+)"/', $dm[1], $dd);
+        $domains = $dd[1] ?? [];
+    }
+
+    echo json_encode([
+        'ok'        => true,
+        'host_id'   => $hostId,
+        'domains'   => $domains,
+        'warn_days' => (int)($w[1] ?? 30),
+        'crit_days' => (int)($c[1] ?? 7),
+    ]);
+    exit;
+}
+
+// ── Run cert_monitor.sh now ───────────────────────────────────────────────────
+if ($action === 'run') {
+    $script = SCRIPTS_DIR . '/Monitors/cert_monitor.sh';
+    if (!file_exists($script)) {
+        echo json_encode(['ok' => false, 'error' => 'cert_monitor.sh not found']);
+        exit;
+    }
+    set_time_limit(180);
+    exec('bash ' . escapeshellarg($script) . ' 2>&1', $out, $rc);
+    // Read freshly written cache
+    $data = file_exists($cacheFile)
+        ? (json_decode(file_get_contents($cacheFile), true) ?: null)
+        : null;
+    echo json_encode([
+        'ok'     => true,
+        'data'   => $data,
+        'output' => array_slice(array_filter(array_map('trim', $out)), 0, 30),
+        'rc'     => $rc,
+    ]);
+    exit;
+}
+
+// ── Default: return cached status ─────────────────────────────────────────────
+if (!file_exists($cacheFile)) {
+    // No cache yet — return configured domains so UI can show them unchecked
+    $hostId   = vv_detect_host();
+    $hostIdUp = strtoupper($hostId);
+    $confRaw  = ($hostId !== 'unknown') ? vv_read_conf_raw($hostId . '.conf') : '';
+    $master   = vv_read_conf_raw('master.conf');
+
+    preg_match('/^\s*CERT_WARN_DAYS\s*=\s*(\d+)/m', $master, $w);
+    preg_match('/^\s*CERT_CRIT_DAYS\s*=\s*(\d+)/m', $master, $c);
+    $domains = [];
+    if (preg_match('/' . $hostIdUp . '_CERT_MONITOR_DOMAINS\s*=\s*\(([^)]*)\)/s', $confRaw, $dm)) {
+        preg_match_all('/"([^"]+)"/', $dm[1], $dd);
+        foreach ($dd[1] ?? [] as $d) {
+            $domains[] = ['domain' => $d, 'status' => 'UNKN', 'days' => null, 'expires' => ''];
+        }
+    }
+
+    echo json_encode([
+        'ok'         => true,
+        'checked_at' => null,
+        'host'       => $hostId !== 'unknown' ? strtoupper($hostId) : null,
+        'warn_days'  => (int)($w[1] ?? 30),
+        'crit_days'  => (int)($c[1] ?? 7),
+        'domains'    => $domains,
+    ]);
+    exit;
+}
+
+$data = json_decode(file_get_contents($cacheFile), true) ?: [];
+echo json_encode(array_merge(['ok' => true], $data));