New

• ollama: migrate storage from Longhorn to local-path on bare-metal-llm
• security: encrypt secrets at rest with AES-256-GCM #485
• dashboard: Phase 5 settings/admin + Phase 6 responsive tables + Phase 7 WCAG 2.1 AA #483

Fixed

• lint: remove redundant encrypt closures flagged by clippy #487
• security: add encryption_key to AppConfig struct literals in tests and test helpers #486