Core shield controls

These values are stored on the workspace. The Chrome extension pulls them from /api/workspace/settings on open and every ~20s while the side panel is open, and writes local changes back through the same API when you adjust controls there — so webapp and extension converge without manual refresh.