Make every live edit reach the device, and warn when it doesn't

In live mode the device is now written first and the document only takes
what the device accepted. Every live_hooks failure records a reason, and
warn_failure() shows it in a dialog and the status bar instead of failing
silently.

- Move, properties, OX page editor: rejected values are rolled back and listed
- Add/remove link: no longer edits the DOM alone when an end can't be resolved
- Add/delete component: report why the device refused
- Tidy Layout: sends each new position to the device, reverts refusals,
  marks the document dirty, and pushes no undo step in live mode
- User Manager: add (one Sox add carrying cred/perm/prov), edit and delete
  now go to the device
- Binary Buf slots (e.g. User.cred) are sent as Buf bytes, not as Str text
- Bump version to 0.0.0.136

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

ox_page_view.py

@@ -552,11 +552,13 @@ class OxPageViewPanel:
         if not changes:
             return False
 
+        # Live: the device first, and the page only shows what the device accepted.
         live_failures = []
         for element, name, _before, after in changes:
+            if app_state.live_mode and not live_hooks.live_set_prop_value(element, name, after):
+                live_failures.append(f"{name}: {live_hooks.last_error}")
+                continue
             set_prop_value(element, name, after)
-            if live_hooks.is_live() and not live_hooks.live_set_prop_value(element, name, after):
-                live_failures.append(name)
 
         if not app_state.live_mode:
             undo.push(undo.SlotValueCommand(changes))
@@ -566,8 +568,13 @@ class OxPageViewPanel:
 
         who = comp.get("name", "?")
         if live_failures:
-            app_state.set_status(
-                f"{who}: written locally but failed on device: {', '.join(live_failures)}")
+            live_hooks.warn_failure(
+                "Page Editor",
+                f"{len(live_failures)} of {len(changes)} change(s) to {who} did not reach "
+                "the device and were not applied",
+                "\n".join(f"  • {failure}" for failure in live_failures),
+            )
+            return len(live_failures) < len(changes)
         else:
             app_state.set_status(
                 f"{who}: {', '.join(name for _, name, _, _ in changes)} changed.")