refactor(settings): read a silence-after of an hour or more as Never

A stored value of 60 minutes or more now reads as Never, which rings that
long anyway. The picker no longer shows both "60 minutes" and "Never" for
the same window. Also drops a redundant null check in TimerRingPolicy.

Refs #17

docs/ARCHITECTURE.md

@@ -1175,8 +1175,8 @@ from ringing until its battery is flat, what bounds the ring services' wake
 locks, and what keeps a reboot hours later from resuming a ring nobody was
 there for. So "Never" maps to `SilenceAfter.HARD_STOP` (60 minutes), longer
 than any finite choice, and the settings hint says so in words. Stored values
-go through `SilenceAfter.sanitise` on read, on write and from a backup: over 60
-is 60, so no value can make a ring outlast the hard stop, and a negative one is
+go through `SilenceAfter.sanitise` on read, on write and from a backup: 60 or more
+is "Never", so no value can make a ring outlast the hard stop, and a negative one is
 the default rather than the clamp's floor, which would be "Never".
 
 Changing the setting mid-ring applies at once. The settings screen writes it