Expand description
TUI event loop and the per-iteration helpers that drive it.
Everything that runs while the TUI is on the alternate screen lives
here: the main run_tui orchestrator, its six tick-scoped helpers
(startup tasks, event dispatch, lazy cert check, pending SSH connect,
pending snippet run, teardown), plus Vault cert-cache helpers used by
the dispatch logic.