getLoginServers

Returns current MDM servers first. OnlyShowAuthorizedHosts restricts the list only when AppServiceHosts contains a nonblank host. Otherwise, resource defaults and custom servers from settings followed by runtime preferences are included, deduplicated by trimmed URL. Custom entries retain independent ownership: removing an MDM host does not delete a saved custom entry for the same URL.