fix(ui): reconcile remote agent state after repair

[nmorgowicz]

Summary

• Treat expanded Windows %APPDATA% paths and scheduled-task paths as equivalent during managed-agent health checks.
• Mirror discovered agent tokens into both settings and setup fields while retaining the raw token behind the mask.
• Preserve the token correctly when setup completion saves merged settings.

Validation

• cargo clippy -- -D warnings
• cargo test (1363 passed, 14 ignored)
• npm run validate-js
• npm run lint
• cargo build --release
• cargo check --target x86_64-pc-windows-gnu
• git diff --check