Add `pendingSyncOrigins: string[]` to InstanceState so components re-render when pending password-sync flags change. Hydrate from localStorage on autoConnectAll, clear on reset, and remove the localStorage-only read path from `hasPendingPasswordSync`.