feat(FN-2585): remove top-level remote access toggle

- Remove the standalone remoteEnabled setting from CLI, core settings defaults/types, and dashboard settings APIs/UI
- Treat remote access as enabled when an active provider is selected and that provider is configured as enabled
- Update remote auth and engine lifecycle checks to gate on provider activation instead of a global flag
- Adjust tests and add a changeset documenting the remote access configuration simplification

packages/core/src/__tests__/store.test.ts

@@ -2628,7 +2628,6 @@ describe("TaskStore", () => {
 
   describe("remoteAccess settings", () => {
     const baseRemoteAccess = {
-      enabled: true,
       activeProvider: "cloudflare" as const,
       providers: {
         tailscale: {
@@ -2759,7 +2758,6 @@ describe("TaskStore", () => {
       await store.updateSettings({ remoteAccess: null as any });
 
       const settings = await store.getSettings();
-      expect(settings.remoteAccess?.enabled).toBe(false);
       expect(settings.remoteAccess?.activeProvider).toBeNull();
       expect(settings.remoteAccess?.tokenStrategy.persistent.token).toBeNull();
 

packages/core/src/settings-schema.ts

@@ -157,7 +157,6 @@ export const DEFAULT_PROJECT_SETTINGS = {
   agentPrompts: undefined,
   promptOverrides: undefined,
   remoteAccess: {
-    enabled: false,
     activeProvider: null,
     providers: {
       tailscale: {

packages/core/src/types.ts

@@ -1214,7 +1214,6 @@ export interface RemoteAccessLifecycleConfig {
 }
 
 export interface RemoteAccessProjectSettings {
-  enabled: boolean;
   activeProvider: RemoteAccessProvider | null;
   providers: RemoteAccessProvidersConfig;
   tokenStrategy: RemoteAccessTokenStrategyConfig;