Fix remaining CLI and dashboard experience issues

[adamXbot]

Summary

Fix the remaining experience issues from the earlier audit:

• Preserve preset response, dedupe, custom payloads, and memo while editing the new-key form.
• Save global notification destinations transactionally, retaining unchanged identities, signing secrets, activation state, and notification history.
• Reject CLI installer flag combinations that hide generated output and provide the exact installer recovery command after partial completion.
• Anchor CLI live-hit polling to database time so workstation clock skew cannot hide new hits.
• Incorporate the refreshed dependencies from Clear production dependency audit #94.

Verification

• All package type checks passed locally.
• Server, CLI, and edge unit suites: 517 tests passed locally against the refreshed dependencies.
• Database integration, standalone HTTP, production build, CLI artifact, dependency audit, and security analysis are covered by the fresh CI run.
• PostgreSQL is unavailable on this host, so the database integration cases run in CI.

Dependencies

#94 supplies the current security-patched lockfile. The fresh production scan reports zero advisories; its merge must precede this PR.