feat(ui): Settings view + per-space project cards (status/research/edit/delete) + theming pass

- Settings (#/settings): API tokens (mint/list/revoke), Agents list, Orthos Mode placeholder
- Per-space Projects: Void-1-style expandable cards — inline status, ↻ Research (Eithan stub),
  Edit/New modal, Delete-with-confirm; migration 019 adds research_status/notes/timestamps;
  POST /api/projects/:id/research stub; GET /api/agent-tokens list
- Global +1 font bump; themed scrollbars; larger/bolder themed topbar

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

lib/api/routes/agents.js

@@ -35,6 +35,9 @@ tokensRouter.use(requireOwner);
 
 router.get('/', asyncWrap(async (_req, res) => { res.json(await repo.list()); }));
 
+// Token metadata across all agents (label/usage/revocation; never the hash) for Settings.
+tokensRouter.get('/', asyncWrap(async (_req, res) => { res.json(await repo.listTokenMeta()); }));
+
 router.post('/',
   validate({ body: createSchema }),
   asyncWrap(async (req, res) => {