settings

This module is scaffolded but not enabled in the initial secure MVP.

Implement with server-scoped authorization, agent RPC allowlists, SSH host-key verification and audit logging before enabling operations.