feat(ai-tools): Settings → AI Tools, Default/Other lane picker, per-run bypass switch (#40 A1)

Settings → Dashboard gains an AI Tools section (installed tools with
Enabled/Disabled and Set default, available ones with a homepage link,
Refresh). useAiTools shares one catalog copy across the app and replaces
LANE_TOOL_LABEL. The Add-lane modal picks Default (<tool>) or Other…; the
router row reads Native (<tool>) and disables AI Router profiles for tools
that cannot use one. The run form gives catalog tools resume and a red
per-run Bypass permissions switch (Codex too). Claude Code / Codex settings
tabs hide while that tool is disabled. The Workspace probes each lane tool's
CLI fresh.

Docs: CLAUDE.md tool/bypass rule, AGENTS.md, LANES.md, API.md, CLI.md,
server/README.md, OpenAPI fragment + regenerated openapi.yaml.

client/src/i18n/locales/en/settings.json

@@ -495,6 +495,21 @@
     "testOk": "The endpoint answered — {{model}} is reachable with this key.",
     "testFailed": "No answer ({{status}}): {{message}}"
   },
+  "aiTools": {
+    "title": "AI Tools",
+    "description": "AI coding CLIs AgentHub can run in a lane. Detected on this machine's PATH; a disabled tool is hidden from Add lane.",
+    "installed": "Installed ({{count}} detected)",
+    "available": "Available to install ({{count}})",
+    "refresh": "Refresh",
+    "noneInstalled": "No AI tool found on PATH. Install one, then press Refresh.",
+    "default": "Default",
+    "setDefault": "Set default",
+    "enabled": "Enabled",
+    "disabled": "Disabled",
+    "enabledOf": "{{tool}} enabled",
+    "homepage": "Homepage",
+    "homepageOf": "{{tool}} homepage"
+  },
   "appearance": {
     "title": "Appearance",
     "description": "Colour mode and theme. Saved in this browser only.",