feat(cli): UME lazy exec via shared profiles and ume_ne_id MCP support

Co-authored-by: Cursor <cursoragent@cursor.com>

web/src/i18n/en.ts

@@ -465,6 +465,31 @@ const en = {
       clearTitle: "Clear keyword and reset to page 1",
       expand: "Expand details",
       collapse: "Collapse details",
+      cliConnect: "CLI connect",
+    },
+    tabs: {
+      main: "UME sync",
+      cli: "CLI connect",
+    },
+    cli: {
+      title: "UME CLI connection profile",
+      hint: "Unified SSH credentials and hop/bastion for UME inventory NEs. OClaw MCP can exec show commands via ume_ne_id without per-device managed_ne entries.",
+      statusReady: "CLI profile is ready for UME NE command execution.",
+      statusNotReady: "Set target username and hop/bastion settings (if enabled).",
+      profileName: "Profile name",
+      targetUsername: "Target SSH username",
+      targetPassword: "Target SSH password",
+      passwordKeep: "Leave blank to keep unchanged",
+      newProfile: "New profile",
+      deleteConfirm: "Delete this CLI profile?",
+      deleted: "Profile deleted",
+      saved: "CLI profile saved",
+      connectTestTitle: "Sample NE connectivity test",
+      sampleNePh: "ume_ne_id (copy from NE list below)",
+      sampleNeRequired: "ume_ne_id is required",
+      connectTestSubmitted: "Connectivity test submitted",
+      existingProfiles: "Existing profiles",
+      default: "default",
     },
     alarms: {
       title: "Current alarms",