Phase 4 enhancements: WebSocket auth, HTTPS UI, plugin hooks, build fixes

Security:
- Add token-based WebSocket authentication (closes critical security gap)
  - In-memory token store with 24h TTL (token_store.py)
  - POST /api/auth/token exchanges Basic Auth for WS token
  - GET /api/auth/status public endpoint for auth check
  - WebSocket validates token query param, rejects with close code 4401
  - Frontend LoginPrompt modal for credential entry
  - WebSocket manager handles full auth flow with auth_required state
  - No-op when AUTH_ENABLED=false (preserves existing behavior)

HTTPS:
- Wire HTTPS toggle in Settings UI (POST /api/system/ssl/toggle)
- Add certificate regeneration button
- Display SSL info (expiration, SANs, SHA256 fingerprint)

Plugins:
- Wire trigger_hook("pm3_command") in PM3 service
- Wire trigger_hook("update_check") in update manager

Build/Infrastructure:
- Enable NetworkManager in pi-gen AP setup stage
- Add HF booster board detection patch for Proxmark3
- Update LED PWM control patch
- Fix BLE adapter, UPS drivers, WiFi manager improvements
- Update HTTPS support stage script

Documentation:
- Update PROJECT_STATUS.md and IMPLEMENTATION_PRIORITIES.md

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/backend/services/pm3_service.py

@@ -139,15 +139,22 @@ class PM3Service:
                 )
             )
 
-        # 3. Execute command
+        # 3. Trigger plugin hooks (non-critical)
+        try:
+            from ..managers.plugin_manager import get_plugin_manager
+            await get_plugin_manager().trigger_hook("pm3_command", command)
+        except Exception:
+            pass
+
+        # 4. Execute command
         try:
             result = await worker.execute_command(command)
 
-            # 4. Update session activity
+            # 5. Update session activity
             if session_id:
                 self.session_manager.update_activity(session_id, device_id)
 
-            # 5. Return result
+            # 6. Return result
             if result.success:
                 return PM3ServiceResult(
                     success=True,