feat: restore NVS runtime config with CLI commands (NVS > build-time priority)

Bring back two-layer configuration: build-time defaults from mimi_secrets.h
with runtime NVS overrides via serial CLI. NVS values take highest priority
so a pre-flashed board can be reconfigured anywhere with just a USB cable.

Restored CLI commands: wifi_set, set_tg_token, set_api_key, set_model,
set_proxy, clear_proxy, set_search_key. Added new commands: config_show
(displays all config with sensitive fields masked), config_reset (clears
all NVS overrides), and help (lists all commands).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

main/telegram/telegram_bot.h

@@ -20,3 +20,8 @@ esp_err_t telegram_bot_start(void);
  */
 esp_err_t telegram_send_message(const char *chat_id, const char *text);
 
+/**
+ * Save the Telegram bot token to NVS.
+ */
+esp_err_t telegram_set_token(const char *token);
+