fix(ssh): turn a host's orca CLI control on by default and stop resetting saved choices (#29856)

* fix(ssh): allow a host's orca CLI to control Orca by default, and stop resetting saved choices

An absent allowRemoteCliControl now means on; only an explicit false turns the
desktop browser bridge and relay-era orchestration commands off. Removes the
one-time reset of saved true values, the consent stamp writes and the reset
notice, which would have silently turned off hosts upgraded from stable.

* fix(ssh): keep the CLI control choice when adding a host from the sidebar

* fix(ssh): read an older client's omitted CLI control switch as off over RPC

* fix(ssh): check the managed fence before routing settings in browser bridge candidates

src/shared/ssh-remote-cli-control.ts

@@ -0,0 +1,8 @@
+import type { SshTarget } from './ssh-types'
+
+/** On unless the user turned it off; a missing target (removed host) is never allowed. */
+export function isRemoteCliControlAllowed(
+  target: Pick<SshTarget, 'allowRemoteCliControl'> | null | undefined
+): boolean {
+  return target != null && target.allowRemoteCliControl !== false
+}