feat: enhance document import functionality and runtime configuration

- Added support for watching local folders in the EmbeddedImportMenu, including a new FolderSync icon.
- Introduced onFolderWatched callback to handle folder watch success.
- Updated runtime configuration hooks to allow optional access outside the RuntimeConfigProvider.
- Improved error handling in ZeroProvider for unauthorized access scenarios.
- Refactored base API service to manage desktop authentication more effectively.

surfsense_web/lib/apis/base-api.service.ts

@@ -108,6 +108,9 @@ class BaseApiService {
 
 			const refreshRetryKey = getRefreshRetryKey(mergedOptions.method, url);
 			if (this.isDesktopClient && !desktopAccessToken && !isNoAuthEndpoint) {
+				// Desktop refresh token is gone/revoked — send the user to /desktop/login
+				// (same treatment as a server 401 below) instead of erroring in place.
+				handleUnauthorized();
 				throw new AuthenticationError("You are not authenticated. Please login again.");
 			}