The analysis-disabled gate (stop/inhibit vision when Admin→Settings analysis is OFF, so stale queued jobs don't pin ~4.4GiB) was applied directly on the host and never committed, so it was absent from main and from this branch — merging as-is would have regressed it. Re-introduce it here so the merged manager has BOTH gates: vision is held down if analysis is disabled OR host memory is tight. Also grant the read-only role SELECT on app_settings. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>