feat(webui): Tools tab as left-nav sidebar + stop-instead-of-pause on tag removal

Tools tab now uses the same vertical UniFi-style sidebar as Settings:
Command / File sync / RFID sync / NVS / EQ rules / Backup / Firmware are
individual sub-panes (icon-only on mobile, pinned while scrolling) instead
of one long stacked scroll. The jump-to-section helpers (sync runner, RFID
sync, firmware update) now activate the matching sub-pane.

New "Stop instead of pause on removal" option (General -> options, a
sub-option of "Pause when RFID tag is removed"): pulling the tag fully
stops playback and clears the playlist rather than just pausing, and
re-applying the tag restarts it from the beginning. Persisted in NVS
(stopRfidRem) and applied live without a reboot; covers both the PN5180
and MFRC522 readers. UI checkbox is only enabled while pause-on-removal
is on. Demo mock + i18n (de/en/fr) updated.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: fhirschmann

README.md

@@ -134,6 +134,7 @@ neon logo that doubles as the SVG favicon ([`7be5254`](../../commit/7be5254)):
 | **Browser demo on GitHub Pages** ([live](https://fhirschmann.github.io/leoino/)): a device-free static build of the management page with a mock WebSocket/REST layer and copyright-free content, auto-deployed on every push so the UI can be tried without hardware. A CI check (`tools/check_demo_endpoints.py`) fails the build if a new firmware HTTP endpoint is added without a matching demo-mock handler (or an explicit allow-list entry), so the demo can't silently break | [`8bf93da`](../../commit/8bf93da) |
 | **Consolidated, auto-saving Settings tab**: WiFi/MQTT/FTP/Bluetooth merged with the general settings into one tab; the sub-tabs are a **vertical UniFi-style sidebar** (icon-only on mobile; stays pinned while scrolling) with flat, consistent sections, split into General / **Buttons** / **LEDs** / **Power** / **RFID** / … . General/Buttons/LEDs/Power/RFID auto-save (debounced); the credential tabs keep an explicit submit on purpose | [`8b01876`](../../commit/8b01876) · [`1944cf4`](../../commit/1944cf4) · [`c284d0e`](../../commit/c284d0e) · [`32aabfd`](../../commit/32aabfd) |
 | **Configurable branding**: re-brand the navbar header *and* footer from a single **Brand name** field (General → Branding) with a live preview as you type — empty keeps the "Leo Industries" default, so the fork is easy to re-brand | [`fd57fcb`](../../commit/fd57fcb) |
+| **Tools tab as a left-nav sidebar**: the Tools tab now uses the same **vertical UniFi-style sidebar** as Settings — Command / File sync / RFID sync / NVS / EQ rules / Backup / Firmware are individual sub-panes (icon-only on mobile, pinned while scrolling) instead of one long stacked scroll | [`PENDING`](../../commit/PENDING) |
 | **Password protection**: single password (no username), 90-day `HttpOnly` session cookie, brute-force lockout, logout entry; off in hotspot mode. Scripts/API clients authenticate with the password as an **API key** (`X-API-Key` header) | [`e74e712`](../../commit/e74e712) |
 | **One shared device password (Security tab)**: the password fields were pulled out of the WiFi/FTP/WebDAV tabs into a single **Security** sub-tab — one password now protects the web interface, FTP *and* WebDAV (set once, applies everywhere; applied live without a reboot). An **empty password is accepted** and disables protection for all three. The **hostname** moved to the top of the **General** tab (saved on its own; `/wificonfig` now does partial updates) and the navbar brand reads just **Leo Industries** | [`c6dfc67`](../../commit/c6dfc67) |
 | **FTP/WebDAV accept any username**: with one shared password the username is pointless, so both servers now authenticate by **password only — any username is accepted** (wrong password still rejected; empty device password = open). The username fields are gone from both tabs. FTP uses a **vendored, patched copy** of ESP-FTP-Server-Lib in [`lib/`](lib/ESP-FTP-Server-Lib) (password-only auth); WebDAV's self-contained server decodes the HTTP-Basic header and compares only the password | [`be96850`](../../commit/be96850) |
@@ -229,6 +230,7 @@ neon logo that doubles as the SVG favicon ([`7be5254`](../../commit/7be5254)):
 | Change | Commit |
 | --- | --- |
 | Tag removal detected via consecutive-miss counter instead of a wall-clock timeout: pause after ~0.5 s, immune to phantom dropouts and task starvation | [`1fad9cd`](../../commit/1fad9cd) |
+| **Stop instead of pause when the tag is removed** (General → options, sub-option of "Pause when RFID tag is removed"): pulling the card fully stops playback (clears the playlist) rather than just pausing; re-applying the card starts it again from the beginning. Persisted in NVS (`stopRfidRem`) and applied live without a reboot | [`PENDING`](../../commit/PENDING) |
 | Vendored PN5180 library with fast no-card detection: read attempts on an empty field take ~25 ms instead of ~230 ms (no more 200 ms timeout) | [`8762784`](../../commit/8762784) |
 | SLIX2 password support for protected ICODE-SLIX2 tags | [`d3cc69c`](../../commit/d3cc69c) |
 | Configurable idle LED and progress bar colors | [`bdc54e5`](../../commit/bdc54e5) |

html/locales/de.json

@@ -696,6 +696,8 @@
 			"restartFreshHrsExp": "Wird ein Hörbuch länger als die angegebene Stundenzahl nicht abgespielt, startet es beim nächsten Auflegen wieder von vorn statt an der gespeicherten Stelle. Praktisch für Kinder, die sich nach einem Tag Pause nicht mehr erinnern, wo sie waren. 0 = aus (immer fortsetzen). Standard: 24. Benötigt eine gültige Uhrzeit (NTP/RTC). Fork-Funktion.",
 			"pauseIfRfidRemoved": "Pause wenn RFID-Tag entfernt",
 			"pauseIfRfidRemovedExp": "Pausieren wenn RFID-Tag entfernt wird. Mehr Infos <a href='https://forum.espuino.de/t/welche-optionen-beim-kompilieren-gibt-es/120' target='_blank'>hier</a> unter <code>PAUSE_WHEN_RFID_REMOVED</code>.",
+			"stopIfRfidRemoved": "Bei Entfernen stoppen statt pausieren",
+			"stopIfRfidRemovedExp": "Wenn aktiv (nur in Kombination mit „Pause wenn RFID-Tag entfernt“): Beim Abziehen der Karte wird die Wiedergabe vollständig gestoppt statt nur pausiert. Erneutes Auflegen startet die Karte von vorn.",
 			"dontAcceptRfidTwice": "Denselben RFID-Tag nicht erneut akzeptieren",
 			"resumeOnSameRfidExp": "Wenn die Wiedergabe pausiert ist und derselbe RFID-Tag erneut aufgelegt wird, wird die Wiedergabe fortgesetzt. Funktioniert nur, wenn <em>Denselben RFID-Tag nicht erneut akzeptieren</em> aktiv ist.",
 			"playLastRfidOnReboot": "Letzten RFID-Tag nach Neustart abspielen",
@@ -813,6 +815,15 @@
 				"started": "Gerät installiert die Firmware und startet neu – die Seite lädt gleich automatisch neu…",
 				"error": "Update fehlgeschlagen (siehe Konsole/Log)."
 			}
+		},
+		"nav": {
+			"command": "Befehl",
+			"sync": "Datei-Sync",
+			"rfidsync": "RFID-Sync",
+			"nvs": "NVS",
+			"eqrules": "EQ-Regeln",
+			"backup": "Backup",
+			"fwupdate": "Firmware"
 		}
 	},
 	"help": {

html/locales/en.json

@@ -696,6 +696,8 @@
 			"restartFreshHrsExp": "If an audiobook has not been played for more than the given number of hours, it starts over from the beginning the next time the card is placed, instead of resuming the saved position. Handy for kids who, after a day's break, no longer remember where they were. 0 = off (always resume). Default: 24. Requires a valid clock (NTP/RTC). Fork feature.",
 			"pauseIfRfidRemoved": "Pause when RFID tag is removed",
 			"pauseIfRfidRemovedExp": "Playback is paused when the RFID tag is removed. More information <a href='https://forum.espuino.de/t/welche-optionen-beim-kompilieren-gibt-es/120' target='_blank'>here</a> under <code>PAUSE_IF_RFID_REMOVED</code>.",
+			"stopIfRfidRemoved": "Stop instead of pause on removal",
+			"stopIfRfidRemovedExp": "When enabled (only together with “Pause when RFID tag is removed”): removing the tag fully stops playback instead of just pausing. Re-applying the tag starts it again from the beginning.",
 			"dontAcceptRfidTwice": "Don't accept the same RFID twice",
 			"dontAcceptRfidTwiceExp": "RFID tags are not accepted twice in a row. Cannot be used together with <em>Pause when RFID tag is removed</em>.",
 			"playLastRfidOnReboot": "Play last RFID tag on restart",
@@ -813,6 +815,15 @@
 				"started": "Device is installing the firmware and will restart – the page will reload shortly…",
 				"error": "Update failed (see console/log)."
 			}
+		},
+		"nav": {
+			"command": "Command",
+			"sync": "File sync",
+			"rfidsync": "RFID sync",
+			"nvs": "NVS",
+			"eqrules": "EQ rules",
+			"backup": "Backup",
+			"fwupdate": "Firmware"
 		}
 	},
 	"help": {

html/locales/fr.json

@@ -685,6 +685,8 @@
 			"restartFreshHrsExp": "Si un livre audio n'a pas été lu depuis plus que le nombre d'heures indiqué, il recommence depuis le début lors de la prochaine pose de la carte, au lieu de reprendre à la position enregistrée. Pratique pour les enfants qui, après une journée de pause, ne se souviennent plus où ils en étaient. 0 = désactivé (toujours reprendre). Par défaut : 24. Nécessite une horloge valide (NTP/RTC). Fonction du fork.",
 			"pauseIfRfidRemoved": "Mettre en pause si la balise RFID est retirée",
 			"pauseIfRfidRemovedExp": "Mettre en pause la lecture si la balise RFID est retirée. Plus d'informations <a href='https://forum.espuino.de/t/welche-optionen-beim-kompilieren-gibt-es/120' target='_blank'>ici</a> sous <code>PAUSE_IF_RFID_REMOVED</code>.",
+			"stopIfRfidRemoved": "Arrêter au lieu de mettre en pause",
+			"stopIfRfidRemovedExp": "Si activé (uniquement avec « Mettre en pause si la balise RFID est retirée ») : retirer la balise arrête complètement la lecture au lieu de la mettre en pause. Reposer la balise redémarre depuis le début.",
 			"dontAcceptRfidTwice": "Ne pas accepter la balise RFID deux fois",
 			"dontAcceptRfidTwiceExp": "Ne pas accepter la même balise RFID deux fois. Ne peut pas être utilisé avec <em>Mettre en pause si la balise RFID est retirée</em>.",
 			"playLastRfidOnReboot": "Lire la dernière balise RFID au redémarrage",
@@ -802,6 +804,15 @@
 				"started": "L'appareil installe le micrologiciel et va redémarrer – la page se rechargera sous peu…",
 				"error": "Échec de la mise à jour (voir la console/le journal)."
 			}
+		},
+		"nav": {
+			"command": "Commande",
+			"sync": "Sync fichiers",
+			"rfidsync": "Sync RFID",
+			"nvs": "NVS",
+			"eqrules": "Règles EQ",
+			"backup": "Sauvegarde",
+			"fwupdate": "Firmware"
 		}
 	},
 	"help": {