feat(ui): hide paid features from community-tier dashboard (#891)

* feat(ui): hide paid features from community-tier dashboard

Community installs render only the features they can use. Tier-locked
sections, lock badges, upsell cards, and "Upgrade" buttons no longer
appear anywhere except the License page in Settings, which is the
single discoverable upgrade path.

Concretely:

- PaidGate and AdmiralGate now render null for non-qualifying tiers
  instead of upsell cards.
- SectionGate (settings) hides tier-locked sections entirely.
- Settings sidebar and command palette filter out items the operator
  cannot reach.
- Configuration Status widget on the dashboard drops the Automation
  section for community and hides any locked rows in remaining
  sections.
- Fleet > Status node cards drop locked summary rows.
- Stack action menu, sidebar bulk bar, file upload / download, scan
  comparison, network topology toggle, node label picker all hide
  for community instead of showing disabled affordances or "Upgrade"
  literal text.
- Removes tierUpsell, TierLockChip, and useDismissalState (no longer
  referenced).

Backend tier guards remain authoritative; this changes UI discovery
only.

* test(e2e): assert upload control is absent in community tier

The community-clean-ui change removes the "Upgrade to unlock upload"
pill from the file explorer. Update the matching e2e assertion to
verify the upload control is not rendered, instead of waiting for a
pill that no longer exists.

frontend/src/components/SecurityHistoryView.tsx

@@ -164,23 +164,21 @@ export function SecurityHistoryView({ open, onClose }: SecurityHistoryViewProps)
           <div className="flex items-center justify-between gap-3">
             <SheetTitle className="font-display italic text-2xl">Scan history</SheetTitle>
             <div className="flex items-center gap-2">
-              <Button
-                variant="outline"
-                size="sm"
-                className="border-border"
-                onClick={compareSelected}
-                disabled={compareDisabled || !isPaid}
-                title={
-                  !isPaid
-                    ? 'Scan comparison requires Skipper or Admiral'
-                    : compareDisabled
-                      ? 'Select exactly two completed scans to compare'
-                      : 'Compare the two selected scans'
-                }
-              >
-                <GitCompare className="w-4 h-4 mr-2" strokeWidth={1.5} />
-                Compare ({selected.length}/2)
-              </Button>
+              {isPaid && (
+                <Button
+                  variant="outline"
+                  size="sm"
+                  className="border-border"
+                  onClick={compareSelected}
+                  disabled={compareDisabled}
+                  title={compareDisabled
+                    ? 'Select exactly two completed scans to compare'
+                    : 'Compare the two selected scans'}
+                >
+                  <GitCompare className="w-4 h-4 mr-2" strokeWidth={1.5} />
+                  Compare ({selected.length}/2)
+                </Button>
+              )}
               <Button
                 variant="outline"
                 size="sm"