desktop: Soft Tactile Settings › LLM as real screens

[plombeer31]

Part of the Soft Tactile desktop redesign. Depends on #440 (base branch facelift/1-foundation); every region PR can merge in any order after it. The integrated build is facelift/integration.

Soft Tactile, Settings › LLM (ST-20…27), redrawn from terminal text as real screens. Builds on the foundation PR; sits inside the Settings frame PR. Row builders, llmKey, llmAct, writers and polls are untouched.

What changes

• Toolbar: Local / Cloud / External / Fallback as a segmented control (still .llmmode with data-act="llm:mode:*"), status readout, refresh, LLM logs.
• What answers now: a route card with provider and model logos, ids in mono, route chip and the daemon's own state word.
• Run mode: Local / Cloud / Fusion as three cards; the 1·2·3·4·6·8 workers segment and the restart line when Fusion runs.
• Local models: rows with model logo, mono id, downloaded / remote chip, best-fit chip, tag, description, coloured fit line, caution and the action Enter takes; Add from Hugging Face; the Ollama note.
• Download and start banners: blue notices with the last CLI line in a mono well and Cancel.
• Cloud: provider rows with logos, key chip and the amber Unverified chip; the active provider's models with a filter, a counter and the disabled price facet ("pricing is not exposed").
• External: the URL row with a status chip, the URL form and the Ollama offer as floating cards; a refused probe shows under the row.
• Fallback chain: numbered rows, move up / down on the selected link, the appended local link locked, "append local" as a switch.
• Logs: a mono log with red / amber / blue lines.
• Confirms: a red floating card with Cancel N / Delete Y over an inert pane.

Tests

• model-picks.drive.mjs: the Settings leg waits for the tab's first refresh before reading the mode strip (it read "Local" at 2 s and "Cloud" once the route sync landed — a race, not markup).

Verified

• model-picks.drive.mjs 29/29 (68 / 8 / 4 GB).
• Trusted-input driver, 41/41: every pane, the smoke's text lists, typing a filter, the remove-provider confirm opened with d and cancelled with n, the External probe of http://127.0.0.1:8080 with nothing running (refused, nothing written), a fallback link added and moved, logs, the Hugging Face parse error, a real 33 MB download started and cancelled.

Found, not changed (existing logic)

• Choosing Fusion reports success, but the 0.5.5 agent's config schema has no llm.runMode, so its whole-file write drops the key and the workers segment never appears. Fusion needs an agent ≥ 0.6.0; the desktop write itself is correct (setRunMode in main/agent-cli.ts).
• Cloud reads "Active" on local routes because an unset run mode defaults to cloud.
• "key ok" means a key name is present, not that it was checked.
• Probe errors show "fetch failed" to the user.

Smoke text

This PR keeps invisible copies of the old terminal strings so the smoke's text checks pass on it alone. facelift/integration removes them and points those checks at what is on screen (commit 35faccf); merge through the integration PR to get both.