fix(settings): force can_edit=1 for runtime keys in API and DB writes

editable_only now includes RUNTIME_KEYS; normalize can_edit in responses.
UpdateConfig and montzar login persist can_edit=1. SQL override moved before COMMIT.

Co-authored-by: Cursor <cursoragent@cursor.com>

app/Services/MontzarService.php

@@ -71,7 +71,7 @@ class MontzarService
 
         Setting::updateOrCreate(
             ['key' => 'montzar_token'],
-            ['value' => $token, 'is_active' => 1]
+            ['value' => $token, 'is_active' => 1, 'can_edit' => 1]
         );
 
         return $token;