feat(webcrt): add CRT-style browser terminal for managed and UME NEs

Ship an ops WebCRT module with xterm.js UI, WebSocket session bridge reusing hop/bastion login, searchable paged targets, and session audit limits.

Co-authored-by: Cursor <cursoragent@cursor.com>

web/vite.config.ts

@@ -10,6 +10,7 @@ export default defineConfig({
       "/v1": {
         target: "http://127.0.0.1:8890",
         changeOrigin: true,
+        ws: true,
       },
     },
   },