Merge branch 'main' into the Android head

Main grew the screens the host-management plan called for — hosts, pins, snippets, logs,
import, teams — plus the ObjectStore and Import projects behind two of them, and moved
WindowsDeviceKeyStore into the desktop head's Platform folder.

Five of those view models landed in a directory this branch had already moved, so they
join the rest in DodoSSH.Client.Shell: git spotted the rename and put them there, and the
namespaces followed. Shell picks up ObjectStore and Import as a result, which the Android
head then gets transitively and will use neither of at first — scoped storage means there
is no ~/.ssh/config to import, and file transfer is out of its first scope.

Desktop suites green at 155 and 64.

Directory.Packages.props

@@ -100,6 +100,22 @@
       ProxyJump both go through a loopback TCP bridge. See docs/adr/.
     -->
     <PackageVersion Include="SSH.NET" Version="2025.1.0" />
+    <!--
+      The S3 client, for buckets as a remote in the file browser. First-party, Apache-2.0, and
+      managed only — no native assets — which is the bar this file sets for anything that gets
+      pinned. Taken rather than hand-rolled because the alternative here is implementing SigV4
+      request signing, and unlike the openssh-key-v1 container (which had no library at all) a
+      maintained implementation of this exists and is the one every S3-compatible service tests
+      against.
+
+      AWSSDK.Core is declared and pinned forward. What AWSSDK.S3 4.0.101.6 resolves on its own is
+      4.0.1, which is covered by GHSA-9cvc-h2w8-phrp — low severity, and this repository builds
+      with NuGet audit as errors, so "low" is not a reason to carry it. 4.0.100.9 is past it and
+      inside the same major. Same treatment as the OpenApi and SQLitePCLRaw entries above, and the
+      same standing obligation: this is now ours to keep current.
+    -->
+    <PackageVersion Include="AWSSDK.S3" Version="4.0.101.6" />
+    <PackageVersion Include="AWSSDK.Core" Version="4.0.100.9" />
     <!--
       Avalonia 12.1.0, with the WebView control on 12.0.1 — the latest it has shipped. Its
       dependency is Avalonia >= 12.0.0 with no upper bound and it targets net10.0, so the skew