Fix host alignment and add scoped Maintenance remediation

[pacphi]

Retired codex mcp-server registrations could remain at user or project scope, and sync could report convergence despite an unresolved duplicate. This adds transport-based alignment checks and explicit, backed-up correction while preserving Ruflo dual-mode execution, AQE's native Claude/Codex providers, and modern MCP endpoints.

ak host align previews and applies scoped corrections, remembers only approved repair recipes, and rejects changed or ambiguous configurations. Setup/sync verify the final state, and ak run refuses affected host workers until blocking anomalies are resolved. The Maintenance dashboard now exposes a Host alignment view under User and Project filters, with exact one-registration preview, approval, and verified transaction receipts.

ADR-0051 records the supported mechanisms and official/upstream sources. User-facing upgrade and Maintenance documentation describe scope selection, recovery backups, and the current lack of automatic dashboard Undo for this recipe.

Validation:

• pnpm test: 3,949 unit tests passed, six skipped; legacy suites passed; 92.02% line coverage.
• pnpm run test:ui: full browser suite passed, including User/Project filtering and exact alignment preview selection.
• Typecheck, lint, complexity gate, Markdown lint, and build passed (lint warnings, no errors).
• Live workstation realignment removed 17 exact retired registrations with 17 recovery backups. Repeat inspection found zero remaining findings or repairs; 16 protected routing/plugin state items were unchanged.

Configuration inspection and route resolution do not claim model entitlement, authenticated inference health, or control over external programs that later rewrite configuration. The original writer of the historical duplicate remains unidentified.