v0.308.0: controller batch 2026-10-12 — clear-address warning (R-922), secret sweep over every page (R-255), read_failed (R-266), no NVMe heat band (R-333), share globe (R-577), Hungarian dates and numbers (R-562), lost-drive option pinned (R-521)

Operator rulings 2026-10-12, 09 §3 decisions 196, 204-207, 223, 227. MinAgent 0.131.0 unchanged.
R-255's sweep found one leak, fixed here: an optional-config secret_input was rendered into its
settings page; it is now revealed on demand. Hungarian parity fixtures re-captured once for R-562.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/notifications_guard_test.go

@@ -114,6 +114,7 @@ func TestNotificationsGuard_AllowsEmptyEmailZeroEvents(t *testing.T) {
 	rr := postNotifications(t, s, url.Values{
 		"notification_email": {""},
 		"cooldown_hours":     {"6"},
+		"confirm_clear":      {"1"}, // R-922 warning: the household confirmed the clear (TestR922_ClearWarnsFirst)
 	}) // no event_* checkboxes
 
 	// The save PROCEEDED (guard did not fire): the email is intentionally cleared. (Note: