feat(shell): Settings hierarchy, Discover, and /settings/<module-id>

The Settings foundation (ADR 0061):

- URL model. /settings is a real landing page. The platform sections
  are /settings/general, /branding, /displays, and /system. Module
  lifecycle is Discover: /settings/discover/browse, /installed, and
  /updates. /settings/discover is respelled in place to Browse's one
  canonical address. A module's settings are /settings/<module-id>,
  never nested under Discover. Deeper Settings addresses are
  reserved. "Modules" stays the user-facing word: "Discover modules",
  "Installed modules", "Module updates".
- Collisions. Core's one reserved list gains the Settings section
  names (branding, discover, displays, general, system) as a second
  documented group, so no module id can shadow a section; `modules` is
  an ordinary id. apps/api tests hold it equal to the shell's sections.
- Navigation. One Settings item in the same sidebar expands in place
  into Platform and Modules (and Discover's three views) while in
  Settings, and the phone drawer has the same hierarchy. The rest of
  the navigation stays.
- Permissions. GET /api/v1/dashboard/settings evaluates, through
  Core's evaluator, which destinations the viewer may see:
  - Displays: core.devices.manage
  - Discover: core.modules.lifecycle.manage
  - a module's settings: core.modules.configuration.manage, for each
    module that declares configuration (ADR 0029)
  - General, Branding, System: the platform owner, until each has its
    own permission
  These are presentation hints; every data route keeps its own
  enforcement. With nothing visible, there is no Settings link.
- Pages are honest placeholders with Back to Settings. A disabled
  module's settings say it is turned off; a section or module the
  person cannot see says so without detail; an unknown name is not
  found; a failed load withholds the link and offers Retry.
- The deploy smoke opens Settings by deep link, refreshes a section,
  enters Discover, opens the module's settings, uses the phone
  drawer, and returns to the Dashboard.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

scripts/lib/deploy-smoke-browser.mjs

@@ -347,6 +347,80 @@ check(
   "widening the window brings the sidebar back on the same page",
 );
 
+// --- Settings (ADR 0061): a deep link, a refresh, Discover, a module's settings, the drawer -------
+await navigate(`${dashboardOrigin}/settings`);
+check(
+  await waitFor(
+    `${selector("settings-home")} && ${selector("select-settings")}?.getAttribute("aria-current") === "page"`,
+    "the Settings landing page from its own address",
+  ),
+  "a deep link to /settings opens the Settings landing page",
+);
+await evaluate(`${selector("select-settings-displays")}.click()`);
+await waitFor(selector("settings-section-displays"), "Settings → Displays");
+await navigate(`${dashboardOrigin}/settings/displays`);
+check(
+  await waitFor(
+    `location.pathname === "/settings/displays" && ${selector("settings-section-displays")} && ${selector("select-settings-displays")}?.getAttribute("aria-current") === "page"`,
+    "Settings → Displays after a refresh",
+  ),
+  "refreshing a Settings page stays on it, marked in the navigation",
+);
+await navigate(`${dashboardOrigin}/settings/discover`);
+check(
+  await waitFor(
+    `location.pathname === "/settings/discover/browse" && ${selector("settings-discover-browse")}`,
+    "Discover opening at Browse",
+  ),
+  "entering Discover opens Browse at its one canonical address",
+);
+if (openedModuleId) {
+  await navigate(`${dashboardOrigin}/settings/${openedModuleId}`);
+  check(
+    await waitFor(
+      `${selector("module-settings")} && ${selector(`select-module-settings-${openedModuleId}`)}?.getAttribute("aria-current") === "page"`,
+      "the module's settings page",
+    ),
+    `/settings/${openedModuleId} opens the module's settings`,
+  );
+}
+await send("Emulation.setDeviceMetricsOverride", {
+  deviceScaleFactor: 2,
+  height: 844,
+  mobile: true,
+  width: 390,
+});
+await navigate(`${dashboardOrigin}/settings`);
+await waitFor(selector("mobile-navigation-trigger"), "the phone navigation trigger in Settings");
+await evaluate(`${selector("mobile-navigation-trigger")}.click()`);
+await waitFor(
+  `${selector("navigation-drawer")}?.querySelector('[data-testid="select-settings-system"]')`,
+  "Settings in the phone drawer",
+);
+await evaluate(`${selector("select-settings-system")}.click()`);
+check(
+  await waitFor(
+    `location.pathname === "/settings/system" && !${selector("navigation-drawer")} && ${selector("settings-section-system")}`,
+    "Settings → System chosen from the drawer",
+  ),
+  "the phone drawer offers the same Settings hierarchy and closes once a page is chosen",
+);
+await send("Emulation.setDeviceMetricsOverride", {
+  deviceScaleFactor: 1,
+  height: 1080,
+  mobile: false,
+  width: 1920,
+});
+await waitFor(selector("select-overview"), "the sidebar after widening the window");
+await evaluate(`${selector("select-overview")}.click()`);
+check(
+  await waitFor(
+    `location.pathname === "/" && ${selector("host-overview")} && !${selector("settings-subnavigation")}`,
+    "the Overview from Settings",
+  ),
+  "leaving Settings returns to the normal Dashboard navigation",
+);
+
 // --- Sign out on the Dashboard, from the account menu at the bottom of the sidebar ---------------
 await navigate(`${dashboardOrigin}/`);
 await waitFor(selector("host-account-menu"), "the account control");