refactor(settings): extract four panels into settings/ modules

static/js/settings.js was 5,721 lines behind a four-name public surface.
static/js/settings/ already existed with dom, registry, search, sidebar,
navigation and lifecycle, so this continues that package rather than
inventing a layout.

Moved verbatim, 407 lines:

  settings/speech.js        initTtsSettings, initSttSettings
  settings/writingStyle.js  initDocumentWritingStyle
  settings/imageModels.js   initImageSettings
  settings/agent.js         initAgentSettings
  settings/api.js           postSettings, lifted from _postSettings

These five were chosen because their only dependencies outside themselves
were el/byId, _postSettings and sortModelIds. Panels with wider reach stay
put: initEmailAccountsSettings, for instance, pulls a 64-declaration closure
covering most of the file, and splitting that is a design change rather than
a move.

settings.js keeps its public surface exactly: open, close,
refreshAiModelEndpoints and the default export, verified in a browser.

Three test updates the move required:

- tests/helpers/test_settings_shell_coordinator.mjs allowlists the real
  modules the coordinator may import, and rejected the new ones. That guard
  working is the reason to trust the rest of this diff.
- two source-introspection tests read settings.js for behaviour that now
  lives in a panel module. They read the whole settings surface now, so the
  next extraction does not break them again.

tests/helpers/test_settings_shell_coordinator.mjs

@@ -20,6 +20,11 @@ const REAL_MODULES = new Set([
   path.join(JS, 'settings/sidebar.js'),
   path.join(JS, 'settings/navigation.js'),
   path.join(JS, 'settings/lifecycle.js'),
+  path.join(JS, 'settings/api.js'),
+  path.join(JS, 'settings/speech.js'),
+  path.join(JS, 'settings/writingStyle.js'),
+  path.join(JS, 'settings/imageModels.js'),
+  path.join(JS, 'settings/agent.js'),
   path.join(JS, 'searchProviderIcons.js'),
 ]);
 

tests/test_active_document_visibility_contract.py

@@ -6,7 +6,12 @@ ROOT = Path(__file__).resolve().parents[1]
 DOCUMENT_JS = (ROOT / "static/js/document.js").read_text(encoding="utf-8")
 CHAT_JS = (ROOT / "static/js/chat.js").read_text(encoding="utf-8")
 APP_JS = (ROOT / "static/app.js").read_text(encoding="utf-8")
-SETTINGS_JS = (ROOT / "static/js/settings.js").read_text(encoding="utf-8")
+# The writing-style panel moved into static/js/settings/writingStyle.js; read
+# the whole settings surface so this pins behaviour rather than a filename.
+SETTINGS_JS = "\n".join(
+    p.read_text(encoding="utf-8")
+    for p in [ROOT / "static/js/settings.js", *sorted((ROOT / "static/js/settings").glob("*.js"))]
+)
 INDEX_HTML = (ROOT / "static/index.html").read_text(encoding="utf-8")
 CHAT_ROUTE = (ROOT / "routes/chat_routes.py").read_text(encoding="utf-8")
 

tests/test_image_research_settings_static.py

@@ -5,7 +5,12 @@ ROOT = Path(__file__).resolve().parents[1]
 
 
 def test_image_settings_only_list_online_served_image_models():
-    settings = (ROOT / "static/js/settings.js").read_text(encoding="utf-8")
+    # The image panel moved into static/js/settings/imageModels.js; read the
+    # whole settings surface so this pins behaviour rather than a filename.
+    settings = "\n".join(
+        p.read_text(encoding="utf-8")
+        for p in [ROOT / "static/js/settings.js", *sorted((ROOT / "static/js/settings").glob("*.js"))]
+    )
 
     assert "fetch('/api/model-endpoints'" in settings
     assert "!endpoint.is_enabled || !endpoint.online" in settings