feat: vault core/CLI/workbench, vaultd token path, filetree view-state cleanup

Land password-vault dedicated workbench and mnote-vault-core/CLI, agent token
read path design, vault transport split, and retire obsolete filetree smokes.
Ignore local vault reimport scripts that trip secret scanners.

rust/crates/mnote-web/browser/sidebar-tree-runtime.js

@@ -522,6 +522,11 @@ import { createSidebarPageSettingsRuntime } from './sidebar-page-settings-runtim
       '<div class="mnote-vault-header-actions">' +
       '<button type="button" data-vault-create data-testid="vault-create">新建</button>' +
       '<button type="button" data-vault-cipher-book data-testid="vault-cipher-book">密文簿</button>' +
+      '<label class="mnote-vault-insert-cipher" title="在当前焦点字段光标处插入 [Key]" hidden aria-hidden="true">' +
+      '<span class="mnote-vault-sr-only">插入密文</span>' +
+      '<select data-vault-insert-cipher data-testid="vault-insert-cipher" aria-label="插入密文">' +
+      '<option value="">插入密文…</option>' +
+      '</select></label>' +
       '<input type="search" data-vault-search data-testid="vault-search" placeholder="搜索标题、用户名、标签、分组…" aria-label="搜索密码条目" />' +
       '<div class="mnote-vault-tabs" role="tablist">' +
       '<button type="button" role="tab" data-vault-tab="active" class="is-active" aria-selected="true">在用</button>' +
@@ -3698,12 +3703,17 @@ import { createSidebarPageSettingsRuntime } from './sidebar-page-settings-runtim
     var targetRow = detail.targetRowId
       ? document.querySelector('#sidebar-file-tree-root .tree-row[data-shell-mode="filetree"][data-row-id="' + cssEscape(detail.targetRowId) + '"]')
       : null;
+    var dropPosition = detail.dropPosition || 'inside';
     recordFileTreeAction('internal-drop', {
       rowId: detail.targetRowId || '',
       sourceRowIds: rowIds,
-      copy: Boolean(detail.copy)
+      copy: Boolean(detail.copy),
+      dropPosition: dropPosition
+    });
+    void moveSidebarFileTreeRows(rowIds, targetRow, {
+      copy: Boolean(detail.copy),
+      dropPosition: dropPosition,
     });
-    void moveSidebarFileTreeRows(rowIds, targetRow, { copy: Boolean(detail.copy) });
   });
 
   document.addEventListener('contextmenu', function(event) {
@@ -3746,6 +3756,9 @@ import { createSidebarPageSettingsRuntime } from './sidebar-page-settings-runtim
           evaluateSidebarFileTreeWhen: evaluateSidebarFileTreeWhen,
           deleteSelectedSidebarFileTreeRows: deleteSelectedSidebarFileTreeRows,
           pasteSidebarFileTreeClipboard: pasteSidebarFileTreeClipboard,
+          onClipboardChange: function(nextClipboard) {
+            sidebarFileTreeClipboard = nextClipboard;
+          },
         });
         if (handled) return;
       } else {
@@ -3953,10 +3966,8 @@ import { createSidebarPageSettingsRuntime } from './sidebar-page-settings-runtim
     var sourceNodeId = readPageDragNodeId(event);
     if (pageRow && canDropPage(sourceNodeId, pageRow)) {
       event.preventDefault();
-      clearPageDropFeedback();
-      pageRow.setAttribute('data-drop-feedback', 'true');
-      pageRow.setAttribute('data-drop-position', pageDropPosition(event, pageRow));
-      setActivePageDropRow(pageRow);
+      var pagePosition = pageDropPosition(event, pageRow);
+      setActivePageDropRow(pageRow, pagePosition);
       if (event.dataTransfer) event.dataTransfer.dropEffect = 'move';
       return;
     }