Auth stack certs tab, arrs db fallbacks, cert monitor cache, conf parser fix

- Auth stack: fold cert monitor into Auth Stack page as fourth tab (Certs);
  remove standalone cert page and top-level tab
- cert_monitor.sh: write JSON status cache to State_Files/cert_status.json
  after each run; expose per-domain days/expiry via _CERT_DAYS/_CERT_EXPIRY globals
- api/cert.php: new — serves cached cert status; falls back to configured
  domains as UNKN when no cache exists; POST action=run triggers live check
- arrs db fallbacks: vv_arr_cleanup_stats/discovery_stats/recovery_stats now
  read from data/*.db files when log JSON files don't yet exist
- config.php vv_conf_vars(): unescape bash \$ → $ so passwords with dollar
  signs read correctly from conf files
- host1.conf: fill in HOST1_NPM_USER/PASS and HOST1_LLDAP_USER/PASS
- Partnership adapter pattern: Unraid-specific container logic extracted to
  Plugin/unraid/Partnership/; platform-agnostic structure stays in Partnership/
- First-run wizard: uniform multi-step flow for all hosts; HOST2 pull moved
  to checklist; auto SSH keygen and API key creation on save
- api/checklist.php: live setup checklist with pull_master action
- Fullscreen toggle: hide Unraid header/menu; state persists via localStorage

git_pull_execute.sh

@@ -255,10 +255,11 @@ else
     # ── Flash mode: sync Plugin/ to /boot/ so the webUI picks up updates ─────
     # In flash mode SCRIPTS_DIR is in appdata — Plugin/ lives in the repo there
     # but Unraid serves PHP from /boot/. Sync after every pull to keep them in step.
-    if [[ "$TARGET_DIR" != "/boot/config/plugins/varaverk" ]]; then
+    _BOOT_DIR="/boot/config/plugins/varaverk"
+    if [[ "$TARGET_DIR" != "$_BOOT_DIR" ]]; then
         echo ""
         echo "━━━ $ICON_SYNC Flash mode: sync Plugin/ → /boot/ ━━━"
-        if rsync -a --delete "$TARGET_DIR/Plugin/" "/boot/config/plugins/varaverk/Plugin/" 2>/dev/null; then
+        if rsync -a --delete "$TARGET_DIR/Plugin/" "$_BOOT_DIR/Plugin/" 2>/dev/null; then
             echo "  Plugin/ synced to /boot/ ✅"
         else
             warn "Plugin/ sync to /boot/ failed — webUI may be stale until next pull"