Phase 4 enhancements: WebSocket auth, HTTPS UI, plugin hooks, build fixes

Security:
- Add token-based WebSocket authentication (closes critical security gap)
  - In-memory token store with 24h TTL (token_store.py)
  - POST /api/auth/token exchanges Basic Auth for WS token
  - GET /api/auth/status public endpoint for auth check
  - WebSocket validates token query param, rejects with close code 4401
  - Frontend LoginPrompt modal for credential entry
  - WebSocket manager handles full auth flow with auth_required state
  - No-op when AUTH_ENABLED=false (preserves existing behavior)

HTTPS:
- Wire HTTPS toggle in Settings UI (POST /api/system/ssl/toggle)
- Add certificate regeneration button
- Display SSL info (expiration, SANs, SHA256 fingerprint)

Plugins:
- Wire trigger_hook("pm3_command") in PM3 service
- Wire trigger_hook("update_check") in update manager

Build/Infrastructure:
- Enable NetworkManager in pi-gen AP setup stage
- Add HF booster board detection patch for Proxmark3
- Update LED PWM control patch
- Fix BLE adapter, UPS drivers, WiFi manager improvements
- Update HTTPS support stage script

Documentation:
- Update PROJECT_STATUS.md and IMPLEMENTATION_PRIORITIES.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/backend/managers/ups_drivers/__init__.py

@@ -16,7 +16,9 @@ from .i2c_driver import I2CFuelGaugeDriver
 async def auto_detect_driver(
     pisugar_host: str = "127.0.0.1",
     pisugar_port: int = 8423,
-    prefer_native_i2c: bool = True
+    prefer_native_i2c: bool = True,
+    i2c_retries: int = 5,
+    i2c_retry_delay: float = 1.0
 ) -> Tuple[Optional[UPSDriver], str]:
     """Auto-detect available UPS hardware and return appropriate driver.
 
@@ -29,6 +31,8 @@ async def auto_detect_driver(
         pisugar_host: PiSugar server host for daemon detection (legacy)
         pisugar_port: PiSugar server port (legacy)
         prefer_native_i2c: If True, prefer native I2C driver over daemon
+        i2c_retries: Number of I2C detection retries (for boot timing)
+        i2c_retry_delay: Delay between I2C retries in seconds
 
     Returns:
         Tuple of (driver_instance or None, detection_message)
@@ -37,13 +41,16 @@ async def auto_detect_driver(
 
     # Try native PiSugar I2C first (no daemon overhead, minimal CPU)
     if prefer_native_i2c:
-        print("UPS auto-detect: Trying PiSugar I2C (native)...")
-        detected, driver = await PiSugarI2CDriver.detect()
+        print(f"UPS auto-detect: Trying PiSugar I2C (native, {i2c_retries} retries)...")
+        detected, driver = await PiSugarI2CDriver.detect(
+            retries=i2c_retries,
+            retry_delay=i2c_retry_delay
+        )
         if detected and driver:
             model = driver.get_model_name()
             print(f"UPS auto-detect: SUCCESS - PiSugar I2C: {model}")
             return (driver, f"Detected PiSugar UPS via I2C: {model}")
-        print("UPS auto-detect: PiSugar I2C not detected")
+        print("UPS auto-detect: PiSugar I2C not detected after all retries")
 
     # Try PiSugar daemon (legacy fallback)
     print("UPS auto-detect: Trying PiSugar daemon...")