update changelog

CHANGELOG.md

@@ -8,7 +8,7 @@ All notable changes to this project will be documented in this file.
 
 - **Public demo mode**: Read-only mesh showcase via `MESHCHAT_DEMO_MODE` or `--demo` (blocked sends and API mutations, in-app demo banner). Optional ALTCHA v3 on login/setup, `MESHCHAT_AUTH_PAGE_HINT` for login page text, and [docker-compose.demo.yml](docker-compose.demo.yml) for Coolify.
 - **Database upgrades**: Automatic backup-pre-migrate-*.zip before schema migrations (skip with `MESHCHAT_SKIP_PRE_MIGRATE_BACKUP=1`). CLI `--list-backups` and `--export-backup` to list or copy backups for rollback. Post-migrate quick_check, structured migration logs, pre-migrate zip retention (five by default), storage lock for single-writer volumes, and N-1/N-2 fixture upgrade tests.
-- **App sidebar**: Grouped layout is the default. Primary links sit under Communicate, Explore, Network, and App labels, with a More disclosure for Archives, Interfaces, Identities, About, and similar destinations. Appearance setting `app_sidebar_layout` can switch back to Classic (one flat list and the expanded identity footer). The grouped footer is a compact identity chip with announce, QR, and auto-announce interval (15 minutes through 24 hours).
+- **App sidebar**: Grouped layout is the default. Primary links sit under Communicate, Explore, Network, and App labels, with a More disclosure for Archives, Interfaces, Identities, About, and similar destinations. Appearance setting `app_sidebar_layout` can switch back to Classic (one flat list and the expanded identity footer). The grouped footer is a compact identity chip with announce, QR, and auto-announce interval (15 minutes through 24 hours). Press and hold a nav item or section while the sidebar is expanded to reorder links and groups. A save icon appears in the collapse row. Order is stored in the browser.
 - **Tools page**: Tools are listed under Diagnostics, Transfer, Messaging, Network, and Other instead of one ungrouped grid.
 - **Mesh Server executable pages**: On Linux and macOS, a per-node opt-in runs pages marked executable (Mesh Server toggle or `chmod +x`) as shebang scripts. Request `field_*` and `var_*` values plus `link_id` and `remote_identity` are passed in the environment. Script stdout is the page body. Failures return a controlled error page. Disabled on Windows (static files only). Editing a page always shows the file source, never the script output.
 - **Electron hardware choosers**: Serial, USB, and Bluetooth device requests in the desktop app open a native picker (RNode flasher, Web Serial). Electron does not show Chromium's chooser dialog for those APIs.