feat: add resilient updates and access controls

internal/model/model.go

@@ -90,6 +90,21 @@ type PiHoleCredential struct {
 	Nonce      []byte
 }
 
+// SoftwareUpdateSettings contains the locally persisted update state. The
+// encrypted registry token is returned only to trusted backend components and
+// is never passed to templates.
+type SoftwareUpdateSettings struct {
+	RegistryUsername string
+	TokenCiphertext  []byte
+	TokenNonce       []byte
+	LatestVersion    string
+	ReleaseURL       string
+	DesiredVersion   string
+	LastCheckedAt    time.Time
+	LastError        string
+	UpdatedAt        time.Time
+}
+
 // PiHoleRecordLink tracks whether a local DNS entry is managed by this UI or
 // merely retained at Pi-hole after being removed from the active WebUI list.
 type PiHoleRecordLink struct {