Add SSH-managed node registry with connection testing and reauth.

Register hosts under Containers/VMs/Docker with encrypted key storage, and require re-authentication for sensitive account changes.

service/internal/api/test_helpers.go

@@ -42,9 +42,16 @@ func seedCompletedSetup(t *testing.T, configDir string) *http.Cookie {
 	security := settings.DefaultSecuritySettings()
 	payload := settings.Settings{
 		SetupCompleted: true,
-		Groups:         []settings.Group{},
-		Security:       security,
-		Network:        settings.DefaultNetworkSettings(),
+		Groups: []settings.Group{
+			{
+				Name:        settings.AdministratorsGroupName,
+				ScopeKind:   settings.GroupScopeGroup,
+				ScopeName:   "Admin Group",
+				Permissions: allPermissionList(),
+			},
+		},
+		Security: security,
+		Network:  settings.DefaultNetworkSettings(),
 	}
 	if err := settings.SaveSettings(configDir, payload); err != nil {
 		t.Fatalf("SaveSettings: %v", err)