fix(openwrt): fix TollGate provisioning pipeline, add reconfigure UI

Several compounding bugs were blocking end-to-end TollGate provisioning
on OpenWrt 25.x (apk-native) routers:

- install_ipk's non-ar fallback assumed a flat tarball, but some .ipks are
  a gzip tar of the three classic ipk members one level deep; it was
  dumping debian-binary/data.tar.gz/control.tar.gz straight into / instead
  of unpacking the real payload.
- Manually-extracted packages never ran their pending /etc/uci-defaults/*
  scripts (that only happens through opkg/apk's own postinst bookkeeping),
  so nothing ever created /etc/config/tollgate.
- uci_apply() never ensured the target config file existed first — `uci
  set` fails outright on a config namespace nothing has created yet, which
  is true for a package-defined one like "tollgate" (unlike wireless/
  network/dhcp, which ship by default).
- The installed-check and restart_services looked for a binary/init script
  named after the opkg package ("tollgate-module-basic-go"/"tollgate"),
  but the real on-disk names are tollgate-wrt — so status always reported
  "not installed" and service restarts silently no-op'd.
- provision_ssid used `uci add`, creating a new wifi-iface section (and
  therefore a new duplicate broadcast SSID) on every provision call instead
  of updating one in place.

Also adds a TollGateConfig.enabled field so the enable/disable state is
actually applied to the running service and the SSID's own broadcast
(stop + disable at boot, or start + enable), not just written to UCI.

On the frontend, the OpenWrt Gateway page's TollGate panel was read-only
once installed — add an edit form (price, step size, min steps, mint URL,
enabled toggle) that reuses the same idempotent provision-tollgate call.

core/archipelago/src/api/rpc/openwrt.rs

@@ -92,10 +92,13 @@ impl RpcHandler {
             .and_then(|s| s.parse().ok())
             .unwrap_or(0);
 
-        // TollGate — check via opkg (≤24.x) or binary presence (25.x apk-native)
+        // TollGate — check via opkg (≤24.x) or binary presence (25.x apk-native).
+        // The service binary is /usr/bin/tollgate-wrt (per its init.d script),
+        // not /usr/bin/tollgate-module-basic-go — that's only the opkg/apk
+        // *package* name, never an on-disk filename.
         let tollgate_installed = router
             .run("/usr/bin/opkg list-installed 2>/dev/null | grep -q '^tollgate-module-basic-go ' || \
-                  test -f /usr/bin/tollgate-module-basic-go 2>/dev/null")
+                  test -f /usr/bin/tollgate-wrt 2>/dev/null")
             .map(|(_, code)| code == 0)
             .unwrap_or(false);
 
@@ -106,6 +109,7 @@ impl RpcHandler {
                 "metric":        router.uci_get("tollgate.main.metric").unwrap_or_default(),
                 "step_size_ms":  router.uci_get("tollgate.main.step_size").ok().and_then(|v| v.parse::<u64>().ok()).unwrap_or(0),
                 "price_per_step":router.uci_get("tollgate.main.price_per_step").ok().and_then(|v| v.parse::<u64>().ok()).unwrap_or(0),
+                "min_steps":     router.uci_get("tollgate.main.min_steps").ok().and_then(|v| v.parse::<u32>().ok()).unwrap_or(1),
                 "currency":      router.uci_get("tollgate.main.currency").unwrap_or_default(),
                 "mint_url":      router.uci_get("tollgate.main.mint_url").unwrap_or_default(),
             })
@@ -183,6 +187,7 @@ impl RpcHandler {
                 .get("min_steps")
                 .and_then(|v| v.as_u64())
                 .unwrap_or(1) as u32,
+            enabled: p.get("enabled").and_then(|v| v.as_bool()).unwrap_or(true),
         };
 
         let router = Router::connect_password(&host, 22, &ssh_user, &ssh_password)?;