feat: MFA tools, single-instance, tray polish, prefs persistence

Session highlights:

- feat(prefs): DPAPI-backed key/value store (PM.UserPrefs) — fixes
  rememberedUsername being lost across reboots due to the random
  ephemeral HTTP port changing the localStorage origin every launch.
  Bridge cmd://prefs/{get,set} round-trips through Delphi.

- feat(tray): icon visible from startup (NIM_ADD at constructor, not
  at first minimize). Tray context menu themed via uxtheme!135
  SetPreferredAppMode so it follows the app's dark/light setting.

- feat(single-instance): named mutex + RegisterWindowMessage broadcast.
  Second launch posts WM_PMSHOW to HWND_BROADCAST and exits; the
  running bridge restores the window from tray. Mutex lives in Local\
  namespace so distinct Windows users can still each run one.

- feat(mfa): Authenticator sidebar view (live TOTP codes for every
  entry with a secret) + standalone TOTP generator modal (paste
  base32 / otpauth:// URI, or generate a random 20-byte secret).

- feat(sidebar): Folders / Tags / Tools sections collapsible with
  chevron toggle. Badge counts stay visible when collapsed. State
  persisted in settings_json (synced across devices).

- feat(autofill): hotkey when vault is locked now restores the app
  and focuses the master password input instead of no-op'ing
  silently. Cleaner UX for the common "I hit Ctrl+Shift+L but the
  vault was locked" path.

- feat(quick-unlock): when enabled, skip lockVault on Windows lock /
  sleep. Rationale: the DPAPI blob already gates access via the
  Windows account, so re-locking on top of the OS lock is redundant.
  Idle auto-lock still fires (separate opt-in).

- fix(quick-unlock): re-sync state.quickUnlockEnabled from DPAPI
  source-of-truth at boot, instead of trusting (now-volatile)
  localStorage.

- docs: CLAUDE.md updated with all new modules, bridge commands,
  and the port-ephemeral pitfall.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

icon-hex.svg

@@ -0,0 +1,61 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 256 256">
+  <defs>
+    <linearGradient id="hexFill" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0"   stop-color="#0e7490"/>
+      <stop offset="0.5" stop-color="#06b6d4"/>
+      <stop offset="1"   stop-color="#22d3ee"/>
+    </linearGradient>
+    <linearGradient id="hexHighlight" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0"   stop-color="#ffffff" stop-opacity="0.35"/>
+      <stop offset="0.5" stop-color="#ffffff" stop-opacity="0.05"/>
+      <stop offset="1"   stop-color="#ffffff" stop-opacity="0"/>
+    </linearGradient>
+    <radialGradient id="keyholeGlow" cx="0.5" cy="0.5" r="0.5">
+      <stop offset="0"   stop-color="#a78bfa" stop-opacity="0.6"/>
+      <stop offset="0.6" stop-color="#a78bfa" stop-opacity="0.15"/>
+      <stop offset="1"   stop-color="#a78bfa" stop-opacity="0"/>
+    </radialGradient>
+    <filter id="dropHex" x="-15%" y="-15%" width="130%" height="130%">
+      <feDropShadow dx="0" dy="6" stdDeviation="10"
+                    flood-color="#06b6d4" flood-opacity="0.5"/>
+    </filter>
+  </defs>
+
+  <!-- Hexagon body — pointy-top orientation -->
+  <g filter="url(#dropHex)">
+    <path d="M 128 8
+             L 230 66
+             V 190
+             L 128 248
+             L 26  190
+             V 66 Z"
+          fill="url(#hexFill)"
+          stroke="#0e7490" stroke-width="3" stroke-linejoin="round"/>
+  </g>
+
+  <!-- Top highlight band -->
+  <path d="M 128 8
+           L 230 66
+           V 128
+           L 128 100
+           L 26  128
+           V 66 Z"
+        fill="url(#hexHighlight)"/>
+
+  <!-- Glow around keyhole -->
+  <circle cx="128" cy="140" r="68" fill="url(#keyholeGlow)"/>
+
+  <!-- Inner panel (darker hex) -->
+  <path d="M 128 50
+           L 196 90
+           V 166
+           L 128 206
+           L 60  166
+           V 90 Z"
+        fill="#0f172a" fill-opacity="0.55"/>
+
+  <!-- Keyhole — circle + tapered slit -->
+  <circle cx="128" cy="120" r="18" fill="#22d3ee"/>
+  <path   d="M 120 132 L 116 172 L 140 172 L 136 132 Z" fill="#22d3ee"/>
+  <circle cx="128" cy="120" r="7"  fill="#0f172a"/>
+</svg>