fix: harden UI actions and daemon calls for reliable control (v1.3.2)

Retry and serialize pineapd/hak5 calls, queue virtual-pager keys, and grey out buttons until the pager finishes. Deploy now installs python3-light after factory firmware. Bump version to 1.3.2.

Co-authored-by: Cursor <cursoragent@cursor.com>

tests/test_pineap_pool.py

@@ -53,7 +53,7 @@ class SsidPoolHandlersTest(unittest.TestCase):
         server.h_ssids_post(type('C', (), {'args': (), 'body': {'action': 'add', 'ssid': 'NewNet'}})())
         self.assertTrue(any(c[0] == 'PINEAPPLE_SSID_POOL_ADD' for c in calls))
 
-    def test_advertise_routes(self):
+    def test_advertise_enable_is_blocked(self):
         calls = []
 
         def fake(method, path, body=None, timeout=10):
@@ -61,10 +61,11 @@ class SsidPoolHandlersTest(unittest.TestCase):
             return (200, {'success': True})
 
         server.daemon_sock_call = fake
-        server.h_pineap_advertise(type('C', (), {'body': {'enable': True}})())
+        status, payload = server.h_pineap_advertise(type('C', (), {'body': {'enable': True}})())
+        self.assertEqual(status, 400)
+        self.assertEqual(calls, [])
         server.h_pineap_advertise(type('C', (), {'body': {'enable': False}})())
-        self.assertEqual(calls, [('/api/pineap/ssidpool/enable', {'enable': True}),
-                                 ('/api/pineap/ssidpool/disable', {'enable': False})])
+        self.assertEqual(calls, [('/api/pineap/ssidpool/disable', {'enable': False})])
 
     def test_collect_routes(self):
         calls = []