[chen21019]

Server 1.6.554 packages Web Console 1.6.196 and Engine 0.183.355 for optional, scoped AI collaboration. Seven tools cover discovery, conditional description updates and human-approved service upgrades. New pages start with tools off; the two backend capabilities also require explicit operator activation. Existing ordinary API permissions and deployment settings are retained.

The build pins the original component archives, producer revisions, Web Console SBOM and enabled/off profile. Engine archive verification additionally requires the exact official Guava 33.7.2-jre fix. Nine existing, officially unfixed Ubuntu findings were rechecked against current vendor evidence; package identities, severity and release policy are unchanged.

Validation:

• Both component releases passed their full producer tests, artifact security gates and CodeQL; their published assets matched the original CI bytes.
• All 66 Server source gates passed on this candidate, including exact component, archive, SBOM and installation-document contracts.
• Isolated seven-tool acceptance covers scoped upgrades, retired-instance cleanup, a normal FULL-Key control, weak-model use, restart and 78 locale/theme/width cases.
• The Server publication workflow will verify the final image, security scan, fresh startup and restart before publication. Formal 8080 deployment has separate acceptance; the full historical 576-case matrix is not claimed complete.

Keep existing environment variables, ports, security options and data volumes. No production deployment, reverse-proxy change, firewall change or runtime patch is part of this PR.