feat: editable settings page with .env write and container restart

- Add settings form with all config fields (Bot, Commission, Wallets, WireGuard)
- POST handler writes .env file and restarts container via process.exit(0)
- Secrets (ENCRYPTION_KEY, ADMIN_SECRET, GITEA_TOKEN, WG_PRIVATE_KEY, WG_PRESHARED_KEY)
  are never sent to browser - masked placeholders used instead
- PRESERVE_KEYS enforced: secret keys cannot be overwritten via form
- Values sanitized: newlines stripped before writing to .env
- start.sh loads .env file before node to override Docker env_file cache
- Extract shared escapeHtml utility to escape.js (used by 6 view files)
- Update paymentWallets view to link to Settings page instead of .env
- Add .env volume mount for settings panel read/write
- Fix registerRoutes() not being called in index.js (bot menu buttons)

docker-compose.yml

@@ -16,6 +16,7 @@ services:
       - ./db:/app/db/ # Синхронизация базы данных (persistence)
       - ./uploads:/app/uploads/ # Uploaded product photos
       - ./wg/start.sh:/app/start.sh # Монтируем start.sh (генерирует wg0.conf из env)
+      - ./.env:/app/.env:rw # Settings panel read/write
     cap_add: # Минимальные привилегии, необходимые только для WireGuard
       - NET_ADMIN
     sysctls: