feat: type the plugin host record, move plugin strings out of core and add lint checks

src/backend/tests/plugins/security/credential-shapes.test.ts

@@ -31,9 +31,6 @@ function secretHost(id: number): Record<string, unknown> {
     keyPassword: "s3cret-value",
     sudoPassword: "s3cret-value",
     socks5Password: "s3cret-value",
-    autostartPassword: "s3cret-value",
-    autostartKey: "s3cret-value",
-    autostartKeyPassword: "s3cret-value",
     terminalConfig: { sudoPassword: "s3cret-value", fontSize: 14 },
     socks5ProxyChain: [{ host: "p", password: "s3cret-value" }],
   };
@@ -98,7 +95,7 @@ vi.mock("../../../database/repositories/factory.js", () => ({
   }),
 }));
 vi.mock("../../../database/routes/host-plugin-settings.js", () => ({
-  applyPluginHostImportSettings: async () => {},
+  loadHostPluginSettings: async () => new Map(),
 }));
 vi.mock("../../../hosts/host-resolver.js", () => ({
   resolveHostById: async (id: number) => secretHost(id),