[SandObserver]

Summary

• In Settings, while password protection is on and the page's host name is neither a local address nor in Allowed Addresses, show that name with an Add button and a tip. Sign-in attempts from unlisted names share one counter, so a page on another site that points its name at the server can use up an owner's attempts there.
• Add appends the name to the Allowed Addresses field, updates its row, hides the offer and moves focus to the row's edit button. Saving stays with the section's Save button.
• Re-evaluate the offer when the field is edited or protection is toggled.
• Add general.allowedHostsAddTip in all six catalogs.

Testing
All green, e2e included. Added e2e tests for the offer on an unlisted name and its absence on a local address.

Changelog

Added

• Settings offers to add the address you are signed in on to Allowed Addresses.

Checklist

• Stays within the project constraints: one container, no runtime dependencies, no build step (see CONTRIBUTING.md).
• Tests added or updated for new logic, and the full suite, lint, and typechecks pass.
• Docs updated if behavior or configuration changed.