fix: google anti-bot flag + persistent/safe settings apply + TTS engine wiring

- Chrome: --disable-blink-features=AutomationControlled (+ ko-KR) so Google
  shows results, not the /sorry/ automation block.
- Settings persist to /data/jarvis-settings.json (survives recreate; entrypoint
  re-merges it) AND the runtime config; apply restarts via a DETACHED process so
  the HTTP response isn't dropped when the bridge restarts.
- Bridge reads tts_engine from the settings config so the TTS-engine choice
  actually applies.

bridge/server.py

@@ -90,7 +90,20 @@ STT_LANGUAGE = os.environ.get("STT_LANGUAGE", "ko").strip() or None
 # TTS engine: "melo" (MeloTTS Korean speaker, the warm worker) is the primary
 # voice; Piper is kept as a fallback if the worker is unreachable. Set
 # TTS_ENGINE=piper to disable MeloTTS entirely.
-TTS_ENGINE = os.environ.get("TTS_ENGINE", "melo").strip().lower()
+def _tts_engine_setting() -> str:
+    """TTS engine: settings-UI value (runtime config JSON) wins, else env, else
+    melo. Read at startup; the settings UI restarts the bridge on apply."""
+    try:
+        _cp = os.environ.get("JARVIS_CONFIG_PATH", "/app/config/jarvis.json")
+        _v = json.loads(open(_cp, encoding="utf-8").read()).get("tts_engine")
+        if _v:
+            return str(_v).strip().lower()
+    except Exception:
+        pass
+    return os.environ.get("TTS_ENGINE", "melo").strip().lower()
+
+
+TTS_ENGINE = _tts_engine_setting()
 MELO_WORKER_URL = os.environ.get("MELO_WORKER_URL", "http://127.0.0.1:8770")
 MELO_TIMEOUT = float(os.environ.get("MELO_TIMEOUT", "30"))
 # When MeloTTS is the engine, do NOT silently fall back to the English Piper