Remove Password from UserSettings and stop writing it to settings.json; the operator is re-prompted on each launch. Update LoadSettings/SaveSettings comments and adjust the affected test assertion to verify the password is not restored from the persisted model. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>