geenforce: settings in the Settings rail

plugins/geenforce/plugin.py

@@ -91,6 +91,19 @@ class GeEnforcePlugin(BasePlugin):
             },
         ]
 
+    def get_settings_cards(self) -> List[Dict]:
+        """Admin config for GE-Enforce lives in the Settings rail."""
+        return [
+            {
+                'group': 'GE-Enforce',
+                'to': '/settings/geenforce',
+                'icon': 'shield',
+                'title': 'GE-Enforce Settings',
+                'description': 'Client IP allowlist for token-less fleet access',
+                'position': 46,
+            },
+        ]
+
     def init_app(self, app: Flask, db_instance) -> None:
         logger.info(f"GE-Enforce plugin initialized (v{self.meta.version})")