Introduce a host-side API (mirroring the PowerShell bridge pattern) that allows HTML widgets to read and update the application's built-in feature configuration via JavaScript. This API requires explicit consent for sensitive operations, persists changes, and is discoverable by widgets at runtime — it makes no UI changes to the app itself.