fix: PGXL meters/auth/fan, TCI spots+click, PTT-over-CAT, CW <LOGQSO>

- PGXL: remote AUTH password; direct-link meter fallback (VITA-first) with
  250 ms poll + peak-hold; fan mode uses bare "fanmode=" (was ignored).
- TCI: spot colour sent as decimal ARGB (ExpertSDR dropped the hex string);
  spot click handled via CLICKED_ON_SPOT / RX_CLICKED_ON_SPOT to fill the entry.
- FlexRadio: clicking an OpsLog spot on the panadapter now applies the mode too.
- Filter presets: the trash icon deletes again (Radix pointer-down intercept).
- PTT hotkey: keys over CAT when a backend is active (was hijacked by a stale
  Audio-tab RTS/DTR serial setting); AltGr keys allowed; presses logged.
- CW macro <LOGQSO>: logs after the preceding CW is sent, not on the first letter.

frontend/src/components/SettingsModal.tsx

@@ -3273,6 +3273,18 @@ export function SettingsModal({ onClose, onSaved, initialSection, onMainPaneChan
                     </div>
                   </div>
                 )}
+                {/* PowerGenius XL asks for a remote-access code when reached from
+                    outside the LAN (banner "V… AUTH"), like the Tuner/Antenna Genius.
+                    Blank on the LAN. */}
+                {isPGXL && (
+                  <div className="space-y-1 max-w-xs">
+                    <Label>{t('amp.password')}</Label>
+                    <Input type="password" value={(amp as any).password ?? ''}
+                      onChange={(e) => patchAmp(i, { password: e.target.value } as any)}
+                      placeholder={t('amp.passwordPh')} className="font-mono" />
+                    <p className="text-[11px] text-muted-foreground">{t('amp.passwordHint')}</p>
+                  </div>
+                )}
 
                 {/* Band-follow, for any amp that takes its band from a transceiver
                     CAT link (ACOM and SPE both do) — never PowerGenius, which is