Hub stage 2: install, update and uninstall apps on several servers

Writes use only <ID>_ADMIN_TOKEN and need the apps.write capability.
Store URLs are resolved from each server's own listing. The config is saved
to history before an uninstall. Zip uploads are fanned out to the servers.
Every target's result is audited. The console gets a row menu on the
matrix, a target picker, a results dialog with Retry failed, the store and
install from file in All servers mode, and single-server actions for writers.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/compose.hub.example.yaml

@@ -11,6 +11,8 @@ version: "3.8"
 # Токены кладутся в .env рядом с этим файлом (не в git):
 #   MDNS_TOKEN=...
 #   NDNS_TOKEN=...
+#   MDNS_ADMIN_TOKEN=...   # токены hub-admin (Modify и Delete только на Apps): нужны, чтобы хаб менял приложения
+#   NDNS_ADMIN_TOKEN=...
 #   HUB_USER=...        # логин в сам хаб
 #   HUB_PASSWORD=...    # первый вход; затем пользователи в /data/users.json (docs/hub-deploy.md, шаг 4a)
 #
@@ -30,6 +32,8 @@ services:
       - HUB_SERVERS=mdns=https://mdns.shnt.top,ndns=https://ndns.shnt.top
       - MDNS_TOKEN=${MDNS_TOKEN}
       - NDNS_TOKEN=${NDNS_TOKEN}
+      - MDNS_ADMIN_TOKEN=${MDNS_ADMIN_TOKEN}
+      - NDNS_ADMIN_TOKEN=${NDNS_ADMIN_TOKEN}
       # Только пока нет /data/users.json; потом пользователи создаются через users-cli (docs/hub-deploy.md)
       - HUB_USER=${HUB_USER}
       - HUB_PASSWORD=${HUB_PASSWORD}