Injection-safe sh -c wrapper (static script + positional args), KWallet
password flow into a 0600 cred file for mount, smbclient/-g share parsing,
findmnt mounted-state parsing, and the pkexec helper invocations.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Plasma/Applet package metadata (tray applet, id sk.houmeres.synologynas)
and the KConfigXT schema (hosts JSON, mount root, SMB version, options).
Passwords are never stored in config — they live in KWallet.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
