feat(systemd): add and enable continuous tmux-auto-approver user daemon

docs/HATCH-MENU.md

@@ -54,6 +54,13 @@ that only the readback confirms carry `"readback_only": true`.
 Website Ask/Deny is one-way: the override row leaves the allowed
 list (no add UI), verified by absence; absent hosts read as
 "not in Websites list" (effective: web-access default).
+Switch sets click once and never fall back to a second click: a
+re-click would undo a slow commit (switches toggle). Advanced
+switches take one synthetic click; protocol and Data-controls
+switches need trusted clicks (synthetic is a proven no-op there).
+Radios keep their trusted-click fallback (idempotent).
+`data_controls.ai_improvement` is read-only: the site ignores every
+input gesture on that switch (proven live; reads fine, sets raise).
 Caller errors (unknown node/toggle/tab/value) raise `MenuError`
 before any CDP traffic. Transport failures return `{"ok": False}`.