feat(plugins): Traefik problems first, UniFi/SNMP/fleet on shared shapes, audit names its entities, templates on tokens (#5126)

Traefik: routers are graded from their latest scrape (router_state: crit on
any real 5xx share, warn on p95 past the latency critical cutoff or a high
4xx share). Failing and slow routers lead as cards that say why; healthy
ones fold into one table that stays open or shut across polls. Proxy
counts are stat tiles; certificates are graded by Settings -> Thresholds
(tls_days).

UniFi: WAN health is a stat strip (latency graded by the thresholds),
devices carry status dots, event categories and firewall actions are
badges, the alarm count reuses .count-badge (renamed from .nav-count).
SNMP: each device wears a status badge and its readings are stat tiles.

Agent fleet: the table comes first, with a Status column (Reporting /
Silent / Never reported, by the host page's stale_after_seconds), silent
agents first, hosts linked, last seen as |ago.

Audit: entries name their entity (one query per type, steward/audit/
service.py) and link it; something deleted since keeps the name its entry
recorded and says "(deleted)".

Tokens: charts read colours through chart-colors.js (stewardColor resolves
a token to the rgb the browser computed; Chart.js defaults take the page's
text and border colours), so host, history, Traefik and SNMP charts drop
their hex. Template hex colours reach 0 (HEX_CEILING = 0), the last rgba
pills go, and heavy weights (600/700/bold, 60 of them) become 500, the
house pair being 400/500; a guard keeps templates there.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

plugins/host_agent/routes.py

@@ -359,6 +359,28 @@ async def agent_source():
     return Response(body, mimetype="text/x-python")
 
 
+_FLEET_ORDER = {"stale": 0, "pending": 1, "up": 2}
+
+
+def fleet_state(reg, now: datetime, stale_after: int) -> str:
+    """An agent as the fleet table shows it: "up" while it reports, "stale"
+    once its last report is older than stale_after, "pending" if it never has."""
+    if reg.last_seen_at is None:
+        return "pending"
+    return "stale" if (now - reg.last_seen_at).total_seconds() > stale_after else "up"
+
+
+def fleet_rows(regs, hosts_by_id: dict, now: datetime, stale_after: int) -> list[dict]:
+    """The fleet table: silent agents first, then never-reported, then live,
+    each by host name."""
+    rows = []
+    for r in regs:
+        host = hosts_by_id.get(r.host_id)
+        rows.append({"reg": r, "host": host, "name": host.name if host else r.host_id,
+                     "state": fleet_state(r, now, stale_after)})
+    return sorted(rows, key=lambda x: (_FLEET_ORDER[x["state"]], x["name"].lower()))
+
+
 def _stale_after_seconds() -> int:
     return int(
         current_app.config.get("PLUGINS", {})
@@ -803,11 +825,10 @@ async def fleet():
     managed_key_set = bool(
         (current_app.config.get("ANSIBLE", {}).get("ssh_public_key") or "").strip())
 
+    now, stale_after = datetime.now(timezone.utc), _stale_after_seconds()
     return await render_template(
         "settings_list.html",
-        registrations=[
-            {"reg": r, "host": hosts_by_id.get(r.host_id)} for r in regs
-        ],
+        registrations=fleet_rows(regs, hosts_by_id, now, stale_after),
         new_token=new_token,
         install_url=install_url,
         ansible_available=ansible_available,