Turn the Claude Login page into a full Claude management page

The dashboard's Claude page now manages the whole Claude Code install agents
run on, not just the account login:

- Skills: operator-authored SKILL.md rows, synced to each worker's user-level
  ~/.claude/skills at every launch. Managed dirs carry a .handler-managed
  marker so deletions in the UI propagate while hand-installed skills survive.
- Connectors: MCP servers (stdio/http/sse) written per-launch as
  .claude/mcp-servers.json and passed to claude via --mcp-config, so nothing
  lands in the managed repo's tracked tree.
- Plugins: marketplace-pinned plugins folded into generated settings as
  extraKnownMarketplaces + enabledPlugins, installing on boot of headless runs.
- Permissions: defaultMode override plus allow/deny/ask rules merged over the
  env baseline into every generated settings.json.

All of it is plain DB state (new claude_skills / claude_connectors /
claude_plugins / claude_config tables, migration 0010) edited through the new
admin-gated /claude/* API routes and applied by the control container at spawn
and resume — changes reach the next launch of every agent with no redeploy.

The login flow moved into the page's Account tab unchanged; /login redirects
to /claude for old bookmarks.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019f42XmjtVsc3zQ9Dhn6DqZ

frontend/components/Shell.tsx

@@ -1,5 +1,5 @@
 /* The Control Center shell: a left nav (Runs / Repositories / Agents / Approvals / Git
- * Servers / Activity / Shared / Claude Login) and the active route's page on the right,
+ * Servers / Activity / Shared / Claude) and the active route's page on the right,
  * matching the design's hub layout. Each nav item is a real route, so pages are modular
  * and independently loadable; this shell lives in the root layout and persists across
  * navigation, keeping the store, polling loop, and auth alive between pages. Command
@@ -29,8 +29,9 @@ const BADGES: Partial<Record<Section, { count: (s: Store) => number; accent?: (s
   servers: { count: (s) => s.hosts.length },
   activity: { count: (s) => s.commands.length },
   shared: { count: (s) => s.shared.context.length },
-  login: {
-    count: () => 0,
+  claude: {
+    // Everything managed on the page: skills + connectors + plugins.
+    count: (s) => s.claudeSkills.length + s.claudeConnectors.length + s.claudePlugins.length,
     // Draw the eye to it until Claude is logged in on the host this session.
     accent: (s) => s.claudeLogin.status !== "done",
   },