Feature: Add host management and connection management MCP tools

Expose the online-list TLS column through list_online_hosts, search_hosts
and get_host_detail. The value comes from the flag the client reports at
login, so old clients always read false.

Add list_network_connections and kill_network_connection on top of the
connection manager sub-connection protocol. The kill path matches the
original 110-byte record instead of rebuilding addresses, supports a dry
run, refuses UDP/IPv6 targets, and verifies that the quadruple really
disappeared instead of assuming success.

Add a host_* family backed by the machine manager protocol: ten read
tools covering every tab of the host management dialog, and four
recoverable write tools for process freeze/thaw, window restore/hide/
maximize/minimize, service start/stop/pause/continue/restart, and
scheduled task run/stop. Every write re-reads the snapshot before sending
and re-checks afterwards, reporting -32009 for stale targets rather than
acting blindly. The family is gated by McpMachine, the risky subset by
McpMachineDangerous, and writes additionally require read-only mode to
be off.

Route managed sub-connections from MessageHandle and OfflineProc, keep
the single-in-flight rule by sharing the pending table with a request
kind, and move the shared JSON/lock/encoding helpers into McpInternal so
both tool families use one implementation. Settings dialog, design docs
and en_US/zh_TW/de_DE translations are updated accordingly.

Co-Authored-By: deepseek-flash

server/2015Remote/HostJson.cpp

@@ -114,5 +114,9 @@ Json::Value BuildHostJson(context* ctx, _ClientList* clientMap) {
     CString clientType = ctx->GetAdditionalData(RES_CLIENT_TYPE);
     device["clientType"] = AnsiToUtf8(clientType);  // e.g. "MAC", "LNX", "EXE"
 
+    // 登录时上报的 TLS 传输标志（RES_TLS=="1" → "Y"）。老客户端不上报，取值为 "N"。
+    // 注意这是登录凭据而不是实时探测：连接建立后若配置发生变化，需要客户端重连才会更新。
+    device["tls"] = (ctx->GetClientData(ONLINELIST_TLS) == "Y");
+
     return device;
 }