feat(api): integrate identity, notification scope and connection settings into control plane

- Wire identity, metrics and update services into the assembled API.

- Add connection authorization modes and scoped console authorization.

- Preserve notification group IDs for filtered delivery.

- Extend maintenance, backup, resource and module flows with runtime metadata and upstream safety.

apps/api/src/application/system/system-maintenance-service.ts

@@ -30,6 +30,8 @@ export interface MaintenanceOverview {
   };
   readonly storage: {
     readonly databaseBytes: number;
+    /** SQLite file path; empty for in-memory databases. */
+    readonly databasePath: string;
     /** Write-ahead log file size; 0 when the database is not in WAL mode. */
     readonly walBytes: number;
     /** Total size of the retained backup files. */
@@ -195,6 +197,7 @@ export class SystemMaintenanceService {
       },
       storage: {
         databaseBytes: pageCount * pageSize,
+        databasePath: databaseFile,
         walBytes,
         backupBytes: await this.#backupBytes(),
         reclaimableBytes: freelist * pageSize,