fix(wireless): read CAPsMAN radio channels from the controller (v0.23.7-beta)

Follow-ups on #97 and #106, both reported against the releases they shipped in.

#97 — managed radios were missing from Channel Usage entirely
  The query required wireless_interfaces.frequency > 0. A CAPsMAN-managed access
  point stores no frequency of its own: the controller owns the channel, and the
  AP's own rows carry nulls. Every managed radio was therefore filtered out before
  analysis ran, which is why the reporter saw all access points collapse into
  "Standalone" and a controller vanish from the selector — the group had no
  surviving radios to name it.

  The channel now comes from capsman_radios.current_channel where present, parsed
  from RouterOS's `<freq>/<phy>/<control-positions>` form. The control letters give
  a precise operating width — Ce is 40 MHz, Ceee is 80 — rather than the capability
  list a width field reports. Client counts prefer the controller's per-radio figure
  for the same reason.

  Verified only by unit test here, since we run no CAPsMAN. The local fleet still
  reports its two standalone radios unchanged.

#106 — the setting had no way to change it
  maps_enabled shipped without a control, which made it a setting in name only.
  Added under Settings, with the reasoning stated: tiles and geocoding are outbound
  requests to a third party, and the address entered is sent to them.

  Also removed the "map display is off" placeholder. The reporter pointed out it can
  never appear in the environment it was written for — with maps disabled from the
  start no coordinates are ever geocoded, so the block was dead code.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

frontend/src/components/device-detail/DeviceLocationSection.tsx

@@ -281,17 +281,6 @@ export default function DeviceLocationSection({ device }: Props) {
           address={device.location_address!}
         />
       )}
-      {hasMap && !editing && !mapsEnabled && (
-        <div className="card p-4 flex items-start gap-2">
-          <MapPin className="w-4 h-4 mt-0.5 flex-shrink-0 text-gray-400" />
-          <div className="text-xs text-gray-500 dark:text-slate-400">
-            Map display is off, so no request is made to a third-party tile or geocoding
-            service. Stored position:{' '}
-            <span className="mono">{Number(device.location_lat).toFixed(5)}, {Number(device.location_lng).toFixed(5)}</span>.
-            Re-enable under Settings.
-          </div>
-        </div>
-      )}
     </div>
   );
 }

frontend/src/pages/SettingsPage.tsx

@@ -750,6 +750,35 @@ export default function SettingsPage() {
             </div>
           </div>
 
+          {/* Maps & geocoding (issue #106) */}
+          <div className="card p-5">
+            <h3 className="font-semibold text-gray-900 dark:text-white mb-1">Maps &amp; Geocoding</h3>
+            <p className="text-xs text-gray-400 dark:text-slate-500 mb-4">
+              Device location maps use OpenStreetMap for tiles and Nominatim to turn an address
+              into coordinates. Both are outbound requests to a third party, and the address you
+              enter is sent to them. Turn this off on isolated networks, or wherever device
+              locations should not leave your infrastructure — everything else keeps working, and
+              addresses are still recorded as text.
+            </p>
+            <div className="flex items-center justify-between">
+              <div className="text-sm font-medium text-gray-700 dark:text-slate-300">Enable maps and address lookup</div>
+              <button
+                onClick={() => isAdmin && updateSettingsMutation.mutate({ maps_enabled: settings['maps_enabled'] === false })}
+                disabled={!isAdmin}
+                className={clsx(
+                  'relative inline-flex h-6 w-11 flex-shrink-0 rounded-full border-2 border-transparent transition-colors duration-200',
+                  isAdmin ? 'cursor-pointer' : 'cursor-not-allowed opacity-50',
+                  settings['maps_enabled'] !== false ? 'bg-blue-600' : 'bg-gray-300 dark:bg-slate-600'
+                )}
+              >
+                <span className={clsx(
+                  'inline-block h-5 w-5 transform rounded-full bg-white shadow transition duration-200',
+                  settings['maps_enabled'] !== false ? 'translate-x-5' : 'translate-x-0'
+                )} />
+              </button>
+            </div>
+          </div>
+
           <div className="card p-5">
             <h3 className="font-semibold text-gray-900 dark:text-white mb-4">Data Retention</h3>
             <div className="space-y-3">

frontend/src/version.ts

@@ -1 +1 @@
-export const APP_VERSION = 'v0.23.6 Beta';
+export const APP_VERSION = 'v0.23.7 Beta';