A test proves the terminal's trusted hosts prompt: only a forge admin is offered it, a save is audited and live at once, a bad host is refused in the page's words #7592

src/tui/screens/trustedhosts.ts edits which internal hosts origins may reach and is untested in the terminal (test/trusted-hosts-ui.test.ts covers the page only).

Done when

• [ ] New test/tui-trusted-hosts.test.ts: a forge admin opens the prompt, saves a host list, and updateTrustedHosts's audit row and the live setting both show it without a restart
• [ ] A non-admin is never offered the prompt
• [ ] An invalid host is refused with the same sentence Settings → Origins shows, and nothing is saved
• [ ] Each assertion fails when the matching behaviour is removed

Files: test/tui-trusted-hosts.test.ts (new)

Risks. Leaving a test-written trusted host in shared state; each test uses its own forge.

Suggested brief: scout (a person assigns).