feat: truth-first get_ap (dual radio + enterprise) and derived pineap mode

get_ap now reports radio0, radio1 and enterprise APs separately from UCI
(never a stored/cached branch), with radio channel fallback. Mode is
derived from live enabled/collect state instead of showing 'unknown';
device truth wins over stale stored presets.

tests/test_pineap_modes.py

@@ -109,7 +109,8 @@ class PineapModeTest(unittest.TestCase):
         server.daemon_sock_call = fake
         status, payload = server.h_pineap_mode_get(ctx())
         self.assertEqual(status, 200)
-        self.assertEqual(payload['mode'], 'advanced')
+        # Device truth wins: engine off means the device IS passive now.
+        self.assertEqual(payload['mode'], 'passive')
         self.assertFalse(payload['enabled'])
 
     def test_manual_mimic_change_marks_advanced(self):