DEV-2032: document context.settings and the three app-settings tiers

docs/.well-known/agent-skills/fliplet-js-api/SKILL.md

@@ -101,7 +101,7 @@ The Fliplet client-side JavaScript API: every Fliplet.X namespace (Storage, User
 - [Link Action provider](https://developers.fliplet.com/API/providers/link-action.md): Configure link actions (navigate to screen, open URL, document, video, or run JS) in a reusable provider UI executable via `Fliplet.Navigate.to()`.
 - [V3 app analytics and event tracking](https://developers.fliplet.com/API/v3/analytics.md): V3 app analytics and event tracking. Page views are tracked automatically by the fliplet-analytics-spa runtime; this doc covers what you get for free and when to add event() calls for intent-bearing…
 - [V3 app bootstrap constraints](https://developers.fliplet.com/API/v3/app-bootstrap.md): The four constraints every V3 boot HTML must satisfy. Covers Fliplet.require.lazy for dependencies, Fliplet.Media.getContents for source files, the Fliplet().then(...) init sequence, and the locked v…
-- [V3 App Settings Convention](https://developers.fliplet.com/API/v3/app-settings.md): V3 app settings convention for storing public and private configuration. Covers the underscore prefix convention for editor-private settings.
+- [V3 App Settings Convention](https://developers.fliplet.com/API/v3/app-settings.md): V3 app settings convention: public, private (_) and protected (__) keys, who can read each, and how server app actions read them.
 - [V3 Authentication Patterns](https://developers.fliplet.com/API/v3/auth.md): V3 authentication patterns for email/password login, session management, logout, and protected routes. Use these patterns when building authentication flows in V3 apps.
 - [V3 barcodes](https://developers.fliplet.com/API/v3/barcode.md): Scan and generate QR codes and barcodes in V3 apps with Fliplet.Barcode — attachScanner() to scan (web + native) and encode() to render barcode images.
 - [V3 Alpine.js apps](https://developers.fliplet.com/API/v3/frameworks/alpine.md): Constraints for building V3 apps in Alpine.js. Alpine is attribute-driven HTML with no build step, so it maps cleanly to the V3 runtime. Covers x-init timing relative to Fliplet().then and platform-c…

docs/.well-known/agent-skills/index.json

@@ -130,7 +130,7 @@
       "tags": [
         "js-api"
       ],
-      "sha256": "351a1e4fcfc199cb2dea50ba70b293d33333026b8970937731be8d06baa1c529"
+      "sha256": "666092886f9387056475989c165b8c196fb114891d84c3360e9f695d6db120f0"
     },
     {
       "name": "fliplet-docs-index",