fix(ui): SAR credential setup in Settings and async layer toggles.

Add Earthdata token entry on the SAR tab with accurate Mode B status, expose optional FIRMS_MAP_KEY in API settings, and remove the frontend operator-unlock gate that blocked localhost saves. Run network-heavy layer-enable fetches on a background executor with frontend retry polling so FIRMS toggles no longer freeze the single API worker.

backend/tests/test_layer_enable_integration.py

@@ -1,6 +1,8 @@
 """Integration: layer enable triggers immediate data availability."""
 from __future__ import annotations
 
+import time
+
 from services.fetchers._store import active_layers, latest_data, _data_lock
 
 
@@ -12,7 +14,13 @@ def test_firms_enable_populates_slow_payload(client):
     r = client.post("/api/layers", json={"layers": {"firms": True}})
     assert r.status_code == 200
 
-    slow = client.get("/api/live-data/slow")
-    assert slow.status_code == 200
-    fires = slow.json().get("firms_fires") or []
-    assert len(fires) > 0, "firms layer should populate on enable without waiting for scheduler"
+    fires: list = []
+    for _ in range(45):
+        slow = client.get("/api/live-data/slow")
+        assert slow.status_code == 200
+        fires = slow.json().get("firms_fires") or []
+        if fires:
+            break
+        time.sleep(2)
+
+    assert len(fires) > 0, "firms layer should populate after async on-enable fetch"

backend/tests/test_layer_enable_refresh.py

@@ -15,13 +15,15 @@ def test_refresh_firms_on_enable_only():
     with (
         patch("services.fetchers.earth_observation.fetch_firms_fires") as firms,
         patch("services.fetchers.earth_observation.fetch_firms_country_fires") as country,
+        patch("services.layer_enable_refresh._run_slow_enable_fetches") as run_slow,
         patch("services.fetchers._store.bump_data_version") as bump,
     ):
         refresh_newly_enabled_layers({**before, "firms": False})
-
-    firms.assert_called_once()
-    country.assert_called_once()
-    bump.assert_called_once()
+        firms.assert_not_called()
+        country.assert_not_called()
+        run_slow.assert_called_once()
+        assert run_slow.call_args[0][0] == ("firms",)
+        bump.assert_not_called()
 
     active_layers["firms"] = before.get("firms", False)
 
@@ -34,3 +36,21 @@ def test_refresh_skips_when_layer_stays_off():
         refresh_newly_enabled_layers(before)
 
     fetch_cctv.assert_not_called()
+
+
+def test_refresh_cctv_runs_inline():
+    before = {**snapshot_active_layers(), "cctv": False}
+    active_layers["cctv"] = True
+
+    with (
+        patch("services.fetchers.infrastructure.fetch_cctv") as fetch_cctv,
+        patch("services.fetchers._store.bump_data_version") as bump,
+        patch("services.data_fetcher._SLOW_EXECUTOR") as slow_exec,
+    ):
+        refresh_newly_enabled_layers(before)
+
+    fetch_cctv.assert_called_once()
+    bump.assert_called_once()
+    slow_exec.submit.assert_not_called()
+
+    active_layers["cctv"] = before.get("cctv", False)

backend/tests/test_perf_safe_optimizations.py

@@ -56,4 +56,4 @@ def test_layer_enable_refresh_covers_cold_toggle_layers():
 
     source = inspect.getsource(layer_enable_refresh.refresh_newly_enabled_layers)
     for key in ("cctv", "firms", "power_plants", "psk_reporter", "datacenters"):
-        assert f'"{key}"' in source or f"'{key}'" in source
+        assert key in layer_enable_refresh._INSTANT_LAYER_KEYS | layer_enable_refresh._SLOW_LAYER_KEYS