Keep the password that just worked, so the host stops asking for it

The vault has held credentials and host bindings since they landed, and the
only route from a typed password into one ran through two screens: add a
password under Keychain, open the host, bind it. The password box's own tooltip
instructed people to do exactly that by hand — which means typing the secret a
second time, into a screen that has no idea which host it is for, while the
screen that does have the password is the one being left behind. A tick beside
the box does it in one step.

What it produces is an ordinary CredentialSecret, named after the host, bound
through CredentialId with AsksForPassword cleared beside it. That is the whole
reason nothing else here had to change: it syncs, it merges, it appears in the
keychain, it can be renamed and deleted, and it can be bound to the other
nineteen machines that share the account. A password field on HostSecret would
have been a payload schema bump, a fourth place a secret lives, and a copy per
host to rotate and forget.

It waits for a handshake the remote accepted, and that is not caution for its
own sake. Binding on the keystroke would store whatever was in the box —
including the typo about to be refused — and the host would then stop asking,
leaving a machine nobody can connect to until they work out that the keychain
is where the wrong password now lives. For the same reason the password is read
from the credential as dialled rather than from the box, which stays typeable
throughout a handshake.

Off by default, because the typed box exists precisely for the passwords that
should not be in a synchronised vault — a one-off on a machine somebody will
never open again. The credential is written into the host's own vault rather
than the active one: in the personal vault, bound to a team's host, it would be
a binding every other member can see and none of them can resolve.

One thing is given up knowingly. The confirmation naming where the password
went is replaced a moment later by the auto-sync's own count, exactly as
SaveHostAsync's "Saved 'x'" is; this follows that rather than becoming the one
write that suppresses a sync line. The feedback that lasts is the row answering
"credential" and the box disappearing — which is also the only way to store a
password on the phone at all, since that head lists credentials but has never
had an editor to create one in.

src/DodoSSH.Client.App/Views/HostsScreen.axaml

@@ -36,14 +36,23 @@
         a key wants nothing typed here — and a sentence in its place when it does not, because "nothing
         needs typing" and "something needs typing and the box has not appeared yet" look identical and only
         one of them is fine.
+
+        REMEMBER travels with the box and hides with it. It is the two-step chore the box's tooltip used to
+        describe — add a password under Keychain, then bind the host to it — done from the one screen that
+        already has the password, and it takes effect only once the remote has accepted it.
       -->
       <Border Grid.Row="0" Padding="12,8" Background="{StaticResource Panel}"
               BorderBrush="{StaticResource BorderSubtle}" BorderThickness="0,0,0,1">
         <StackPanel Orientation="Horizontal" Spacing="8">
-          <TextBox Text="{Binding Vault.ConnectPassword}" PlaceholderText="password (not stored)"
+          <TextBox Text="{Binding Vault.ConnectPassword}" PlaceholderText="password"
                    PasswordChar="•" Width="200" VerticalAlignment="Center"
                    IsVisible="{Binding Vault.SelectedHostAsksForAPassword}"
-                   ToolTip.Tip="Typed each time and never stored. To stop typing it, add a password under Keychain and bind this host to it in the host's own editor." />
+                   ToolTip.Tip="Typed each time unless REMEMBER is ticked, in which case it is saved to your keychain and bound to this host once the connection succeeds." />
+          <CheckBox IsChecked="{Binding Vault.RemembersConnectPassword}" VerticalAlignment="Center"
+                    IsVisible="{Binding Vault.SelectedHostAsksForAPassword}"
+                    ToolTip.Tip="Saves this password to your keychain, bound to this host, so it is not asked for again. It syncs to your other machines, and only happens if the connection works.">
+            <TextBlock Text="REMEMBER" Classes="hint" FontSize="11" />
+          </CheckBox>
           <TextBlock Text="{Binding Vault.SelectedHostAuthenticationNote}" Classes="hint"
                      FontSize="11" VerticalAlignment="Center"
                      IsVisible="{Binding !Vault.SelectedHostAsksForAPassword}" />