Fix preset publication, volatile settings and client form binding

cordis.bundle.patch.yml

@@ -4,7 +4,7 @@
 
 # Host-plane Netx Ops bridge: settings + credentials → connection publish.
 # Ops-scoped `netx__*` tools mount from the agent preset (`dsh-netxops/tools`).
-# Capability groups: ops in preset + public on; topology off.
+# Capability groups: ops in preset (not public by default); topology off.
 # Rule: one group ↔ one skill (netx-ops / netx-topology).
 #
 # IM + cron are separate profile bundles (pnpm blockExoticSubdeps forbids
@@ -19,6 +19,11 @@
     - id: netxops
       name: dsh-netxops
       config:
+        toolsEnabled: true
+        groupOpsPresets: ''
+        groupTopologyPresets: ''
+        groupBizMonitorPresets: ''
+        groupKbPresets: ''
         apiUrl: http://127.0.0.1:8890
         lang: zh
         thinkingLanguage: auto
@@ -34,7 +39,7 @@
         imTargetId: ''
         imTargets: ''
         groupOpsInPreset: true
-        groupOpsPublic: true
+        groupOpsPublic: false
         groupTopologyInPreset: false
         groupTopologyPublic: false
         groupBizMonitorInPreset: true