Phase 269 — fixes from 267/268 live UAT:
- WS1: REMOVED the auto liv-assistant restart that fired on every install/auth/uninstall (each restart = ~40s of Liv AI 502s). Replaced with a 'pending changes' flag + an explicit 'Apply changes (refresh Liv AI)' button → exactly one restart, operator-controlled.
- WS2: claude login now runs under node-pty (real TTY) so its interactive 'Paste code here' OAuth prompt works (bare claude under a pipe errored with --print). API-key fallback fully intact.
- WS3: auth-gated AionUi agent list — a Caddy exact-path carve-out + a livinityd overlay route hide unauthed agents from the picker (fail-open; aion-cli always shown).
- WS4: use AionUi's built-in /api/assets/logos icons in the Local Agents panel + picker, with the 267 SVG / monogram as fallback.
184/184 backend tests; code review 0 critical (all trust surfaces pass). Caddy gate fail-open verified live post-deploy.
Full Changelog: v44.3...v44.4