Sprint 11 (v1.4.0): Sites Manager — domain lokal via hosts

[devhardiyanto]

What

Fitur Sites Manager: petakan domain lokal (mis. myapp.test → 127.0.0.1) dengan mengelola file hosts sistem secara aman. Tab baru di Settings → Sites.

Why

Melengkapi roadmap M11/v1.4.0 — dev butuh domain lokal tanpa edit hosts manual. Fitur terberat (tulis file sistem + privilege elevation), sehingga dikawal spike gate lebih dulu.

How

• Managed-block sentinel: Servel hanya menyentuh baris di antara marker # >>> servel managed block >>>; isi hosts di luar blok byte-identik. Idempoten, CRLF/LF aware.
• Elevation per-operasi: app tetap non-admin; hanya sites_apply/restore memicu UAC (Windows Start-Process -Verb RunAs, macOS osascript, Linux pkexec + fallback manual). Cancel = no-op bersih.
• Backup + diff + confirm: backup hosts (rotasi 5) sebelum tiap write; modal diff wajib dikonfirmasi sebelum elevation.
• Data model: sites: Vec<Site> di config.json, migrasi v2→v3 (serde default []). Hosts = proyeksi sites yang enabled.

Keputusan owner (open question): tab Settings · custom IP (validasi IPv4) · manual apply + konfirmasi · Linux fallback manual.

Changes

• tauri: commands/hosts.rs (baru) — managed-block engine, backup, elevated write, command sites_status/apply/restore + event sites-changed; config.rs skema sites + migrasi v2→v3 + load_config; register di lib.rs.
• frontend: useSites.ts (baru) composable CRUD + apply/restore/status + validasi; tab "Sites" di Settings.vue dengan modal diff-confirm & restore; useConfig.ts schema.
• release: bump v1.4.0.

Testing

• 82 unit test Rust hijau (managed-block: inject/replace/preserve/idempoten/CRLF, migrasi v2→v3, backup rotasi, guard path-traversal). vue-tsc hijau, build bersih.
• Spike elevation Windows PASS di hosts asli (UAC, blok masuk, baris luar utuh, tak korup, backup terbentuk).
• ⚠️ Jalur cancel-UAC belum diuji empiris — perlu verifikasi manual QA (klik No → hosts tak berubah).

devhardiyanto