feat(F.7+F.17): v3.11.0 — Coolify plugin (67 tools) + tool access overhaul

Catch-up sync spanning v3.7.0 → v3.11.0 of the internal repo.

Platform
- Total tools: 565 → 633 (+68) across 10 plugins (Coolify added)
- Tests: 481 → 828 passing

New plugin: Coolify (67 tools, Track F.17)
- Applications (17): CRUD, lifecycle, logs, env vars
- Deployments (5): list/get/cancel/deploy, app history
- Servers (8): CRUD, resources, domains, validation
- Projects (8), Databases (16, 6 DB types + backups), Services (13)

Tool access system (Track F.7 → F.7d)
- Scope → category mapping with per-tool `category` + `sensitivity`
- Schema v7: `site_tool_toggles(site_id)` + `sites.tool_scope` column
- Schema v8: per-site API keys (`api_keys.site_id`)
- Plugin-specific access-level presets (WP / WC / Gitea / OpenPanel /
  Coolify 5-tier)
- Credential-requirement notice tailored per plugin and tier
- Admin Tools count card on service page
- Dropped redundant `write` tier on WP / WP Advanced / WooCommerce
  (admin-scope tool count = 0 → identical to admin tier)

Dashboard
- Unified site manage page (Connection / Tool Access / Connect)
- /dashboard/keys unified (was /api-keys and /connect)
- CSRF interceptor via meta-tag; removed conflicting cookie reader
- Tailwind: pre-built CSS (scripts/build-css.sh) replaces CDN

Docs
- README / DOCKER_README / CLAUDE updated to 633 tools / 10 plugins
- CHANGELOG entries for v3.7.0 → v3.11.0
- FastMCP compatibility note updated to 3.x (post-v3.5 upgrade)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

tests/test_sites_tool_access_ui.py

@@ -1,4 +1,4 @@
-"""Smoke tests for sites edit page Tool Access section and sites view page (F.7b session 2)."""
+"""Smoke tests for unified site management page (F.7c redesign)."""
 
 from __future__ import annotations
 
@@ -73,38 +73,50 @@ def client(monkeypatch, user_row, patched_db, patched_access):
     return tc
 
 
-class TestSitesEditToolAccess:
-    def test_edit_page_renders_without_500(self, client, coolify_site):
+class TestSitesEditRedirect:
+    def test_edit_page_redirects_to_manage(self, client, coolify_site):
+        """F.7c: /sites/{id}/edit now redirects to unified /sites/{id}."""
         r = client.get(f"/dashboard/sites/{coolify_site['id']}/edit")
-        assert r.status_code == 200
-
-    def test_edit_page_contains_tool_access_card(self, client, coolify_site):
-        r = client.get(f"/dashboard/sites/{coolify_site['id']}/edit")
-        assert r.status_code == 200
-        assert "tool-access-card" in r.text or "Tool Access" in r.text
-
-    def test_edit_page_has_scope_select(self, client, coolify_site):
-        r = client.get(f"/dashboard/sites/{coolify_site['id']}/edit")
-        assert r.status_code == 200
-        assert "tool-scope-select" in r.text
+        assert r.status_code == 301
+        assert f"/dashboard/sites/{coolify_site['id']}" in r.headers["location"]
 
 
-class TestSitesViewPage:
-    def test_view_page_renders_without_500(self, client, coolify_site):
+class TestUnifiedSiteManagePage:
+    def test_manage_page_renders_without_500(self, client, coolify_site):
         r = client.get(f"/dashboard/sites/{coolify_site['id']}")
         assert r.status_code == 200
 
-    def test_view_page_shows_mcp_url(self, client, coolify_site):
+    def test_manage_page_has_connection_section(self, client, coolify_site):
+        r = client.get(f"/dashboard/sites/{coolify_site['id']}")
+        assert r.status_code == 200
+        assert "connection-section" in r.text
+
+    def test_manage_page_has_tool_access_section(self, client, coolify_site):
+        r = client.get(f"/dashboard/sites/{coolify_site['id']}")
+        assert r.status_code == 200
+        assert "tool-access-content" in r.text or "Tool Access" in r.text
+
+    def test_manage_page_has_scope_tiers(self, client, coolify_site):
+        r = client.get(f"/dashboard/sites/{coolify_site['id']}")
+        assert r.status_code == 200
+        assert "scope-tiers" in r.text
+
+    def test_manage_page_shows_mcp_url(self, client, coolify_site):
         r = client.get(f"/dashboard/sites/{coolify_site['id']}")
         assert r.status_code == 200
         assert "mcp-url" in r.text
         assert coolify_site["alias"] in r.text
 
-    def test_view_page_has_client_selector(self, client, coolify_site):
+    def test_manage_page_has_config_snippets(self, client, coolify_site):
         r = client.get(f"/dashboard/sites/{coolify_site['id']}")
         assert r.status_code == 200
         assert "config-client" in r.text
 
+    def test_manage_page_has_quick_key_create(self, client, coolify_site):
+        r = client.get(f"/dashboard/sites/{coolify_site['id']}")
+        assert r.status_code == 200
+        assert "quick-key-btn" in r.text
+
     def test_nonexistent_site_redirects(self, client):
         r = client.get("/dashboard/sites/nonexistent-id")
         assert r.status_code in (302, 303)