feat(rcon): unify terminal workspace

design/us-021-rcon-connections.md

@@ -3,7 +3,7 @@ type: User Story
 title: Manage RCON server connections
 description: Administrators manage encrypted connection settings for Minecraft RCON server addresses.
 tags: [admin, rcon, minecraft, security, operations]
-timestamp: 2026-08-08T12:05:37Z
+timestamp: 2026-08-08T13:40:43Z
 story_id: US-021
 status: verified
 ---
@@ -14,19 +14,19 @@ As an administrator, I want to manage one or more Minecraft RCON connections, so
 
 # Acceptance Criteria
 
-- [x] Existing account-manager administrators can list, add, edit, test, enable or disable, and delete RCON server connections.
+- [x] Existing account-manager administrators use the terminal header to select, add, edit, test, enable or disable, and delete RCON server connections.
 - [x] Each connection has a unique display name, server address, port, enabled state, and write-only password.
 - [x] RCON passwords are encrypted with an authenticated cipher using a deployment-managed master key and are never returned to the browser, audit events, or application logs.
 - [x] Updating a connection preserves its password unless an administrator explicitly supplies a replacement.
 - [x] Administrators can save any syntactically valid DNS hostname and port without deployment-managed endpoint configuration; IP literals remain rejected.
 - [x] Testing a connection authenticates through the server-side RCON proxy and reports a safe success or failure result.
-- [x] Deleting a connection requires explicit confirmation.
+- [x] Add and edit use accessible modal forms, and deleting a connection requires an explicit danger-confirmation modal.
 - [x] Connection mutations independently recheck administrator authorization and create credential-safe audit events.
 - [x] Database changes use a generated versioned Drizzle migration rather than schema push.
 
 # Implementation
 
-The administrator RCON page and server actions manage endpoints without deployment-managed endpoint configuration, preserve write-only passwords, encrypt credentials with connection-bound AES-256-GCM, and emit credential-safe audit events. The `rcon_servers` table is delivered through generated migration `0006_curious_lester.sql`.
+The unified terminal header selects connections and exposes add, test, enable or disable, edit, and delete controls. Add and edit use reusable accessible modal forms, while delete uses a danger-confirmation modal. Server actions manage endpoints without deployment-managed endpoint configuration, preserve write-only passwords, encrypt credentials with connection-bound AES-256-GCM, and emit credential-safe audit events. The `rcon_servers` table is delivered through generated migration `0006_curious_lester.sql`.
 
 # Validation