Merge remote-tracking branch 'origin/master' into gitea/feature/end

Resolved conflicts taking origin/master (v0.5.55) as canonical, with local
features re-applied:
- runtime log level (LOG_LEVEL env + dashboard Settings → Logging, applied
  immediately and persisted across restarts)
- free/noAuth provider enable/disable toggle via providerStrategies.enabled
- parallel model testing (Test All Models / Test Selected Keys)

tests/unit/provider-display-split.test.js

@@ -31,4 +31,10 @@ describe("provider display split (E1)", () => {
     expect(m.ALIAS_TO_ID.kr).toBe("kiro");
     expect(m.getProvidersByKind("tts").length).toBeGreaterThan(0);
   });
+
+  it("Cloudflare exposes API-key authentication on its free-tier card", async () => {
+    const { FREE_TIER_PROVIDERS } = await import("../../src/shared/constants/providers.js");
+    expect(FREE_TIER_PROVIDERS["cloudflare-ai"].authType).toBe("apikey");
+    expect(FREE_TIER_PROVIDERS["cloudflare-ai"].authModes).toEqual(["apikey"]);
+  });
 });