feat: Waves 3+4 — frontend wiring, NATS integration, stores (19 files)

Frontend:
- Wire Dashboard quick actions (start/stop/trigger wipe) + next wipe schedule
- Wire Console WebSocket streaming for real-time output
- Implement TOTP 2FA challenge flow in LoginView
- Wire Plugin load/unload toggle + uninstall buttons with confirmations
- Wire WipesView profile selector, disable trigger when no profiles
- Build full WipeProfiles create/edit modal with all config fields
- Wire MapsView file upload with multipart FormData
- Fix SettingsView empty catch blocks → toast error messages
- Fix stale localStorage token reads in CSV exports → auth store
- Fix auth store hardcoded permissions → JWT-decoded role permissions
- Fix wipe store onMounted lifecycle bug → explicit subscribe action
- Update EarlyAccessView from countdown to "Now Live" state

Backend:
- Wire wipe trigger to publish NATS cmd (corrosion.{id}.cmd.wipe)
- Wire plugin reload/uninstall to publish NATS cmd
- Expand NatsBridgeService: add files, wipe status, server status subs
- Add PATCH schedules/:id/toggle endpoint for task toggling

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-nest/src/services/nats-bridge.service.ts

@@ -19,6 +19,21 @@ export class NatsBridgeService implements OnModuleInit {
       this.emit(licenseId, 'console_output', data);
     });
 
+    this.nats.subscribe('corrosion.*.files.response', (data, subject) => {
+      const licenseId = subject.split('.')[1];
+      this.emit(licenseId, 'files_response', data);
+    });
+
+    this.nats.subscribe('corrosion.*.wipe.status', (data, subject) => {
+      const licenseId = subject.split('.')[1];
+      this.emit(licenseId, 'wipe_status', data);
+    });
+
+    this.nats.subscribe('corrosion.*.server.status', (data, subject) => {
+      const licenseId = subject.split('.')[1];
+      this.emit(licenseId, 'server_status', data);
+    });
+
     this.logger.log('NATS bridge subscriptions initialized');
   }