feat: implement repository clone mode with SSH key support

- Add clone_mode and branch fields to tool_instances
- Add ssh_key_id to git_repositories for per-repo SSH key assignment
- Implement host-side git cloning with branch selection (default: main)
- Mount SSH keys into containers for git operations in clone mode
- Add dirty state check on clone-mode instance deletion with confirmation
- Update SessionsPage with mount/clone selector, branch input, SSH key display
- Add SSH key selector to repository creation form
- Add dirty delete confirmation modal with changed files list
- Update API schemas and endpoints for new fields
- Sync delta specs to main specs (git-repo, tool-instances, repo-clone-mode)
- Archive completed OpenSpec change: repo-clone-mode-with-ssh
- Document git requirement for custom tool types

Quality gates: Frontend typecheck and build passed
OpenSpec: repo-clone-mode-with-ssh archived with all tasks complete

openspec/changes/archive/2026-05-22-ui-redesign-home-settings/tasks.md

@@ -0,0 +1,35 @@
+# UI Redesign - Tasks
+
+## 1. Visual System
+
+- [x] Update global typography to Inter
+- [x] Refine color tokens for the new warm editorial palette
+- [x] Add styling for new home sections and settings tabs
+
+## 2. Navigation and Routing
+
+- [x] Keep Sessions in top-level navigation (intentional decision)
+- [x] Move SSH Keys to Settings tabs
+- [x] Tool Types and Tool Configs moved to Tool Workshop page
+- [x] Add redirects for legacy top-level config routes
+- [x] Keep `/sessions` as dedicated page (not redirecting to `/`)
+
+## 3. Home Page
+
+- [x] Redesign the home page as an overview of open sessions and projects
+- [x] Add summary cards and hero actions
+- [x] Reuse existing session and project data
+- [x] Keep create/open session actions available
+
+## 4. Settings Hub
+
+- [x] Turn Settings into a tabbed hub
+- [x] Build General, SSH Keys, Tool Types, and Tool Configs tabs
+- [x] Reuse existing APIs and forms
+- [x] Keep the Project settings page separate
+
+## 5. Cleanup and Verification
+
+- [x] Remove obsolete top-level pages from navigation flow
+- [x] Update tests for the new landing page and redirects
+- [x] Run typecheck, lint, and build