pub fn list_settings() -> Result<BTreeMap<String, String>, AppError>
List all operational settings (no secrets).