Make live sync configurable

docs/roadmap.md

@@ -254,6 +254,8 @@ resource-scoped capability decisions.
     `geth ssh revocation sync <node-id>`.
   - `[x]` The daemon background live-sync loop refreshes known peers without a
     manual command.
+  - `[x]` Background live-sync can be disabled or retuned with `[sync]`
+    `live_sync_enabled` and `live_sync_interval_ms`.
   - `[x]` SSH metadata live-sync stores per-peer high-water cursors in
     `module_state` and requests only records at or beyond the cursor.
   - `[x]` Local SSH cert request/read/approve/import commands can enforce