feat: Runtime-Config via Diagnostic UI — kein .env-Sync mehr

Framework fuer zentrale Runtime-Konfiguration:
- /api/runtime-config (GET/POST) persistiert in /shared/config/runtime.json
- Werte haben Vorrang ueber die ENV-Variablen aus aria.env
- Feldliste: RVS_HOST/PORT/TLS/TOKEN, ARIA_AUTH_TOKEN, WHISPER_MODEL/LANGUAGE
- Atomic write (tmp + rename) fuer Konsistenz

Bridge:
- load_config() liest nach aria.env noch runtime.json und ueberschreibt
  die Werte. Aenderungen werden beim Neustart der Bridge uebernommen.

Diagnostic UI:
- Neue Sektion "Runtime-Konfiguration" in Einstellungen
- Formular fuer RVS-Credentials + Aria-Auth-Token
- "Speichern" persistiert, triggert auch QR-Code-Regenerierung
- Hinweis: Diagnostic-Container selbst bleibt auf ENV (erstmal)

issue.md konsolidiert — 6 groessere Tasks dieser Session als erledigt.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

diagnostic/index.html

@@ -523,6 +523,39 @@
       </div>
     </div>
 
+    <!-- Runtime-Konfiguration (migriert von .env) -->
+    <div class="settings-section">
+      <h2>Runtime-Konfiguration</h2>
+      <div style="font-size:11px;color:#8888AA;margin-bottom:8px;">
+        Werte werden in <code>/shared/config/runtime.json</code> persistiert und
+        ueberschreiben die ENV-Variablen aus <code>aria.env</code>. Bridge liest
+        sie beim naechsten Start — nach Aenderung <b>Bridge-Container neu starten</b>
+        (Diagnostic-Container bleibt auf ENV).
+      </div>
+      <div class="card" style="max-width:600px;">
+        <div style="display:grid;grid-template-columns:150px 1fr;gap:8px;align-items:center;font-size:13px;">
+          <label style="color:#8888AA;">RVS Host:</label>
+          <input type="text" id="rc-rvs-host" style="background:#1E1E2E;border:1px solid #2A2A3E;border-radius:4px;padding:6px;color:#fff;">
+          <label style="color:#8888AA;">RVS Port:</label>
+          <input type="text" id="rc-rvs-port" style="background:#1E1E2E;border:1px solid #2A2A3E;border-radius:4px;padding:6px;color:#fff;">
+          <label style="color:#8888AA;">RVS TLS:</label>
+          <select id="rc-rvs-tls" style="background:#1E1E2E;border:1px solid #2A2A3E;border-radius:4px;padding:6px;color:#fff;">
+            <option value="true">true (wss://)</option>
+            <option value="false">false (ws://)</option>
+          </select>
+          <label style="color:#8888AA;">RVS Token:</label>
+          <input type="password" id="rc-rvs-token" style="background:#1E1E2E;border:1px solid #2A2A3E;border-radius:4px;padding:6px;color:#fff;font-family:monospace;">
+          <label style="color:#8888AA;">Aria Auth Token:</label>
+          <input type="password" id="rc-auth-token" style="background:#1E1E2E;border:1px solid #2A2A3E;border-radius:4px;padding:6px;color:#fff;font-family:monospace;">
+        </div>
+        <div style="display:flex;gap:8px;margin-top:12px;">
+          <button class="btn" onclick="saveRuntimeConfig()" style="flex:1;">Speichern</button>
+          <button class="btn secondary" onclick="loadRuntimeConfig()" style="flex:1;">Neu laden</button>
+        </div>
+        <div id="rc-status" style="font-size:11px;color:#555570;margin-top:6px;"></div>
+      </div>
+    </div>
+
     <!-- App-Onboarding via QR-Code -->
     <div class="settings-section">
       <h2>App-Onboarding (QR-Code)</h2>
@@ -1465,6 +1498,57 @@
       send({ action: 'send_voice_config', defaultVoice, highlightVoice, ttsEnabled, speedRamona, speedThorsten, ttsEngine, xttsVoice, whisperModel });
     }
 
+    // ── Runtime-Konfiguration ─────────────────────
+    async function loadRuntimeConfig() {
+      const statusEl = document.getElementById('rc-status');
+      statusEl.textContent = 'Lade...';
+      try {
+        const resp = await fetch('/api/runtime-config');
+        const cfg = await resp.json();
+        document.getElementById('rc-rvs-host').value = cfg.RVS_HOST || '';
+        document.getElementById('rc-rvs-port').value = cfg.RVS_PORT || '443';
+        document.getElementById('rc-rvs-tls').value = String(cfg.RVS_TLS) === 'false' ? 'false' : 'true';
+        document.getElementById('rc-rvs-token').value = cfg.RVS_TOKEN || '';
+        document.getElementById('rc-auth-token').value = cfg.ARIA_AUTH_TOKEN || '';
+        statusEl.textContent = 'Geladen.';
+        statusEl.style.color = '#34C759';
+        loadOnboardingQR(); // QR bei Config-Wechsel neu generieren
+      } catch (e) {
+        statusEl.textContent = 'Fehler: ' + e.message;
+        statusEl.style.color = '#FF6B6B';
+      }
+    }
+
+    async function saveRuntimeConfig() {
+      const statusEl = document.getElementById('rc-status');
+      statusEl.textContent = 'Speichere...';
+      const patch = {
+        RVS_HOST: document.getElementById('rc-rvs-host').value.trim(),
+        RVS_PORT: document.getElementById('rc-rvs-port').value.trim(),
+        RVS_TLS: document.getElementById('rc-rvs-tls').value,
+        RVS_TOKEN: document.getElementById('rc-rvs-token').value.trim(),
+        ARIA_AUTH_TOKEN: document.getElementById('rc-auth-token').value.trim(),
+      };
+      try {
+        const resp = await fetch('/api/runtime-config', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify(patch),
+        });
+        const data = await resp.json();
+        if (data.ok) {
+          statusEl.textContent = 'Gespeichert — Bridge-Container fuer Uebernahme neu starten.';
+          statusEl.style.color = '#FFD60A';
+          loadOnboardingQR(); // QR mit neuem Token
+        } else {
+          throw new Error(data.error || 'Unbekannt');
+        }
+      } catch (e) {
+        statusEl.textContent = 'Fehler: ' + e.message;
+        statusEl.style.color = '#FF6B6B';
+      }
+    }
+
     // ── App-Onboarding QR-Code ────────────────────
     let qrLibReady = false;
     function ensureQRLib() {
@@ -1991,6 +2075,7 @@
       if (tab === 'settings') {
         loadHighlightTriggers();
         send({ action: 'get_voice_config' });
+        loadRuntimeConfig();
         loadOnboardingQR();
       }
     }