Coverage calculation for this build was skipped because it contains the same data as another build. See this build for the coverage details.
If you feel that something is wrong here, please contact support.

fix: address Copilot review findings

- main_test.go: switch to require.Len before indexing savedMsgs[0]
  so the test fails fast on a length mismatch instead of panicking
  on out-of-bounds access.
- settings.html: rewrite the in-page warning so it accurately
  reflects that auth-hash and credential rotations apply on the
  next request after /config/reload, only detector and spam-bot
  configuration require a restart.
- config.go: collapse "every available Lua plugin selected" form
  submissions back to a nil EnabledPlugins so the empty-list
  semantic ("auto-enable all plugins, including future additions")
  survives a UI round-trip; previously, hitting Save once froze
  the list at the currently-loaded set.
- config_test.go: add TestNormalizeLuaEnabledPlugins covering the
  collapse-to-nil and preserve-selection cases.