Say it in icons, and put the whole backend behind four tabs

Six things Bryan asked for, which turned out to be one change: the app had
no icon set, so every one of them was blocked on having somewhere for icons
to come from.

That somewhere is dev-updater's arrangement, ported: a Nerd Fonts subset
committed as an asset, drawn as text. `Gear.kt`'s hand-drawn canvas gear
argued against icon fonts because a system font may not have the glyph and
whoever gets the empty box is never the person who wrote it. The objection
is right about *relying* on a system font and the answer is to ship the
glyph, so the file is gone and its reasoning is restated in `NerdIcons.kt`
rather than deleted -- otherwise the next reader re-derives it. `md-cog` and
`md-refresh` are dev-updater's own codepoints, because a cog means the same
thing in both apps.

The root screen's four words under the title are now four tabs, and the two
that act on the whole screen -- settings and refresh -- moved up onto the
title row as glyphs. That row's old comment recorded that a fifth word would
have had nowhere to go; tabs also say something the words did not, which is
that sessions, import, models and setups are four views of one backend
rather than four errands. Refresh feeds whichever tab is showing. Import,
models and setups lose their headings and their Back buttons, since the tab
row is now both.

Usage is a dialog. It is checked *against* what you were reading -- "can I
start this" is asked with the transcript still on screen -- and it had no
navigation of its own, so the only thing its Back could mean was "put this
away". The button that opens it is a chart glyph coloured by the worst of
the machine's windows, so the row says whether the limits are worth opening
before anybody opens them.

One `quotaColor` now colours every bar that measures a quota: blue, yellow
at 75%, red at 95%. The session bar escalates where it used to sit blue at
every level, and the dialog's thresholds moved out of it. A download keeps
plain blue at every value -- it has no limit to approach, and colouring it
like one would say the opposite of what is happening. States that are not
measurements take the ordinary control colour, since blue is the low end of
this scale and would read as "checked, and fine" about a machine nobody
could reach.

Send and stop are the filled paper plane and the filled square. Send keeps
the word "Queue" while a turn is in flight, because that is what pressing it
then does, and an icon that does two things while looking identical would
promise something immediate and do something that waits.

Looked at on the emulator: all six glyphs render, the tabs and the system
back gesture between them, the dialog over a live session, and the bar
bands at 82% and 97% forced through a scratch build, since this account is
at 72/31/5 and would only ever have shown blue.

AGENTS.md

@@ -73,9 +73,18 @@ repo is in PLAN.md's "Backend layout" section.
   `EchoDriver`, and transcripts.
 - `app/` — Compose Android app, single `:androidApp` module, package
   `com.example.aiapp`, label "AI Sessions". `AppRoot.kt` is the navigation
-  `when`; `Api.kt`/`EventStream.kt` the REST + SSE clients; `Events.kt` the
-  event model mirror; `ServerConfig.kt` settings + Keystore-sealed token;
-  screens in `SessionListScreen/SessionScreen/SpawnScreen/SettingsScreen`.
+  `when`; `MainScreen.kt` the root's four tabs (sessions, import, models,
+  setups) with settings and refresh on the title row; `Api.kt`/`EventStream.kt`
+  the REST + SSE clients; `Events.kt` the event model mirror;
+  `ServerConfig.kt` settings + Keystore-sealed token; screens in
+  `SessionListScreen/SessionScreen/SpawnScreen/SettingsScreen`.
+  **Icons are Nerd Fonts glyphs from a committed subset**, not vector assets
+  and not ordinary Unicode — `NerdIcons.kt` declares each codepoint and
+  `app/build-icon-font.sh` subsets the font. The two lists have to agree: a
+  codepoint in the Kotlin that the script did not subset is a glyph that
+  silently isn't there. Rerun the script and commit its output when adding
+  one; it needs network access. `md-cog` and `md-refresh` are deliberately
+  the same codepoints dev-updater uses and must not drift from it.
 - `.dev-updater.ron` — what Dev Updater is asked to do with this checkout:
   the server (built in `server/`, run as `service: Managed(...)`) and the
   APK (built in `app/`), built in parallel. The project it serves is the