feat(v3.13.0): settings live DB reads, remove Directus/Appwrite, admin stats

Settings fixes:
- MAX_SITES_PER_USER, USER_RATE_LIMIT_PER_MIN/HR now read from DB settings
  table (DB > ENV > default), so dashboard/settings changes apply without
  restart. Sync cache refreshed on every save or delete.
- /api/me reports the live DB value for max_sites_per_user.

Admin improvements:
- Admin users bypass per-user rate limiting entirely (role=admin or ADMIN_EMAILS).
- Admin Overview now shows platform stats: registered users, new users (7d),
  total user sites, available tools.

Plugin cleanup:
- Appwrite and Directus plugins removed from the active registry (8 plugins
  now: WordPress, WooCommerce, WordPress Specialist, Gitea, n8n, Supabase,
  OpenPanel, Coolify). Plugin code is retained for future re-enabling.
- Settings page plugin visibility list updated to match.

Mobile onboarding:
- Stepper steps on narrow viewports stack vertically with correct full border
  and rounded corners on each step.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tests/test_tool_access_visibility.py

@@ -24,6 +24,7 @@ from core.tool_access import (
 class TestProviderKeyHelpers:
     def test_ai_image_tool_requires_key(self):
         assert _tool_requires_provider_key("wordpress_generate_and_upload_image")
+        assert _tool_requires_provider_key("woocommerce_generate_and_upload_image")
 
     def test_normal_tool_does_not_require_key(self):
         assert not _tool_requires_provider_key("wordpress_create_post")
@@ -36,6 +37,8 @@ class TestProviderKeyHelpers:
     def test_configured_helper_gates_ai_on_providers_set(self):
         assert not _tool_has_configured_provider("wordpress_generate_and_upload_image", set())
         assert _tool_has_configured_provider("wordpress_generate_and_upload_image", {"openrouter"})
+        assert not _tool_has_configured_provider("woocommerce_generate_and_upload_image", set())
+        assert _tool_has_configured_provider("woocommerce_generate_and_upload_image", {"openai"})
 
 
 class _FakeToolDef: