testing: bootstrap UI, agent reliability, NS-01..04 + alert username

Smoothes the rough edges that came up exercising a live deployment.

First-run bootstrap UI: /bootstrap renders a username + password form
that uses the in-memory token directly (operator no longer copies it
out of the log); /login redirects there while bootstrap is available.

Agent reliability: failJob synthetic envelopes so command.run early
returns no longer hang the server-side job; runtime probe of restic
restore --help drives --no-ownership instead of version sniffing
(0.18.x had it removed). Server unit re-shaped: ProtectSystem=full
plus ReadWritePaths=/etc/restic-manager, no ProtectHome — restore
can now write anywhere a user might want.

Restore wizard: default target is /root/rm-restore/<job-id>/ with
clearer help text. Re-init confirm input uses .field (was .input,
which doesn't exist — text was invisible).

NS-01 host delete: store DeleteHost, admin-band /hosts/{id}/delete
with hostname-confirm danger zone, audit, FK cascade, live WS close.

NS-02 enrollment-token recovery: outstanding-tokens panel on
/hosts/new, regenerate (preserves attachments) and revoke handlers
+ audit, store-level ListOutstandingEnrollmentTokens and
DeleteEnrollmentToken.

NS-03 repo init / probe surface: migration 0020 adds
hosts.repo_status + repo_status_error; WS handler projects every
init job's outcome onto the host row (idempotent already-initialised
collapses to ready); creds-save resets status and dispatches a fresh
probe; /hosts/{id}/repo/probe retry endpoint with banner.

NS-04 dashboard live + sort + filter: query-string filter
(q/status/repo_status/tag/sort/dir), 5s htmx live poll mirroring the
alerts pattern with a localStorage live toggle, sortable column
headers, filter row + clear.

Alerts page: ack'd-by line resolves user_id ULID to username.

Compose.yaml ignored — host-specific.

web/templates/pages/host_repo.html

@@ -8,6 +8,31 @@
 
   <div class="col-span-8">
 
+    {{/* ---------- Repo status (NS-03) ---------- */}}
+    {{if eq $host.RepoStatus "init_failed"}}
+      <div class="rounded-[7px] px-4 py-3.5 mb-5"
+           style="border: 1px solid color-mix(in oklch, var(--bad), transparent 55%); background: color-mix(in oklch, var(--bad), transparent 90%);">
+        <div class="flex items-center justify-between gap-3 mb-1.5">
+          <div class="text-[12.5px] font-semibold text-bad uppercase tracking-[0.08em]">Repo unreachable</div>
+          <form method="post" action="/hosts/{{$host.ID}}/repo/probe">
+            <button type="submit" class="btn btn-sm"
+              {{if $page.Online}}{{else}}disabled title="host is offline"{{end}}>Retry probe</button>
+          </form>
+        </div>
+        <div class="text-[12.5px] text-ink-mid leading-[1.55]">
+          The last init / probe against this host's repo failed. Fix the
+          credentials below and save (the save kicks a fresh probe), or
+          click <span class="mono">Retry probe</span> if you've changed
+          something out-of-band.
+        </div>
+        {{if $host.RepoStatusError}}
+          <pre class="mono text-[11.5px] text-ink-mid mt-2.5 whitespace-pre-wrap leading-[1.5]">{{$host.RepoStatusError}}</pre>
+        {{end}}
+      </div>
+    {{else if eq $host.RepoStatus "ready"}}
+      <div class="text-[12px] text-ok mono mb-5">✓ repo reachable with current credentials</div>
+    {{end}}
+
     {{/* ---------- Connection ---------- */}}
     <h2 class="text-[11.5px] font-semibold uppercase tracking-[0.08em] text-ink-mute mb-3.5">Connection</h2>
     <form method="post" action="/hosts/{{$host.ID}}/repo/credentials" class="panel rounded-[7px] p-5">
@@ -269,7 +294,7 @@
               onsubmit="return confirm('Re-initialise the repo on host &quot;{{$host.Name}}&quot;? Existing snapshots are lost if the rest-server allows the wipe; restic refuses if it sees a config file already there.');">
           <input type="text" name="confirm_hostname" required autocomplete="off"
                  placeholder="type hostname to confirm"
-                 class="input mono"
+                 class="field mono"
                  style="width: 240px; height: 30px; padding: 0 8px; font-size: 12px;">
           <button type="submit" class="btn btn-danger btn-lg whitespace-nowrap"
                   {{if eq $host.Status "online"}}{{else}}disabled title="host is offline"{{end}}>Re-init repo…</button>