fix(prometheus): a refused token stops the scraping, as Home Assistant bans an address after a few refusals (#6355)

Also names the Home Assistant connection by its address in the audit log and
timeline, where its id showed.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

plugins/homeassistant/routes.py

@@ -174,7 +174,7 @@ async def sign_in_callback():
                                            verify_tls=previous[3]))
     await log_audit(current_app, user_id, username, "homeassistant.connection_saved",
                     entity_type="homeassistant_connection", entity_id=connection_id,
-                    detail={"url": url, "can_install": can_install})
+                    detail={"name": url, "can_install": can_install})
     return redirect("/plugins/homeassistant/")
 
 
@@ -209,11 +209,11 @@ async def delete_connection():
             connection = await _connection(db)
             if connection is None:
                 return redirect("/plugins/homeassistant/")
-            connection_id = connection.id
+            connection_id, url = connection.id, connection.url
             await db.delete(connection)
     ended = await _end_sign_in(connection)
     await log_audit(current_app, *_actor(), "homeassistant.connection_removed",
-                    entity_type="homeassistant_connection", entity_id=connection_id, detail={"sign_in_ended": ended})
+                    entity_type="homeassistant_connection", entity_id=connection_id, detail={"name": url, "sign_in_ended": ended})
     if not ended:
         return await _render_index("Removed from Steward, but Home Assistant couldn't be reached to end the sign-in. "
                                    "End it yourself under Security on that user's profile in Home Assistant.")