feat!: drop the backend-side elevation windows; password and passkey sessions share capabilities, passkeys guard what nodes verify; the trust page lists added and removed passkeys [CI]

web/admin/src/App.tsx

@@ -7,9 +7,7 @@ import { conditionalSupported, passkeySupported } from '@shared/api/webauthn'
 import { describeError, Field, Segmented, SourceButton, Spinner, ThemeToggle } from '@shared/ui'
 import { useAuth } from './auth'
 import { BackendUpdateNotice } from './BackendUpdateNotice'
-import { ElevationBar } from './ElevationBar'
 import { PasskeyNotice } from './PasskeyNotice'
-import { PasskeyOnly } from './PasskeyOnly'
 import { AgentDetail } from './pages/AgentDetail'
 import { Agents } from './pages/Agents'
 import { Probes } from './pages/Probes'
@@ -244,8 +242,6 @@ export function App() {
   }
   if (!me) return <Login />
   // 密码登录的会话没有任何能力：只给它添加 Passkey 的页面
-  // 以数据源方式（会话令牌）连别的后端时 kind 是 token，所以只看登录方式
-  if (me.auth_method === 'password') return <PasskeyOnly />
 
   return (
     <div className="shell">
@@ -265,7 +261,6 @@ export function App() {
           </div>
         ))}
         <div className="spacer" />
-        <ElevationBar />
         <SourceButton variant="status" />
         <div className="me">
           <span className="avatar">{(me.username ?? 'A').slice(0, 1).toUpperCase()}</span>