fix(web): console sweep — pairing, displays, stats, logs, auth, i18n

Pairing:
- Refresh the paired-devices list after a native PIN pairing (the happy path never
  invalidated it, so a newly paired device stayed hidden until remount).
- Moonlight PIN: a 204 means "PIN delivered to the waiting handshake", NOT paired, so
  it now reads "PIN sent" instead of a false "Paired successfully".
- Hide the Moonlight pairing card on native-only hosts (HostInfo.gamestream) — it could
  never receive a PIN there.
- Per-row pending on unpair/approve/deny; PIN input maxLength 16 (was 8).

Displays / Library:
- "Arrange displays" save refreshes the settings card (it rewrites the policy), without
  clobbering unsaved Custom edits (re-seed only when the draft still matches the server).
- Live-display list wrapped in QueryState so errors don't read as "no displays".
- "Forever" keep-alive option in the custom editor; edit-game form round-trips the logo
  artwork (was dropped on save); per-card delete pending.

Stats:
- Distinct colour for the native "queue" latency stage (it collided with "capture").
- "Not measured on this path" note on the GameStream health chart; configured-bitrate
  target line on throughput; host-authoritative elapsed timer; LiveCard surfaces
  non-404 errors.

Shell / auth / i18n:
- SSR-stable locale: first client render matches the base-locale SSR (no hydration
  mismatch), then adopts the persisted/browser locale post-hydration.
- BFF proxy maps an upstream (mgmt-token) 401 to 502 so a logged-in user isn't bounced
  into a post-login redirect loop.
- Logout checks the POST result before navigating; logs dedup by seq (StrictMode);
  login "next" keeps query/hash; Dashboard shows the active-session count.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

web/src/stories/lib/fixtures.ts

@@ -17,7 +17,8 @@ import type { StatsStatus } from "@/api/gen/model/statsStatus";
 export const hostInfo: HostInfo = {
 	abi_version: 2,
 	app_version: "7.1.450.0",
-	codecs: ["h264", "h265", "av1"],
+	codecs: ["h264", "hevc", "av1"],
+	gamestream: true,
 	gfe_version: "3.23.0.74",
 	hostname: "ENRICOS-DESKTOP",
 	local_ip: "192.168.1.173",
@@ -46,9 +47,10 @@ export const statusActive: RuntimeStatus = {
 	audio_streaming: true,
 	paired_clients: 3,
 	pin_pending: false,
+	active_sessions: 1,
 	session: { width: 5120, height: 1440, fps: 240 },
 	stream: {
-		codec: "h265",
+		codec: "hevc",
 		width: 5120,
 		height: 1440,
 		fps: 240,
@@ -63,6 +65,7 @@ export const statusIdle: RuntimeStatus = {
 	audio_streaming: false,
 	paired_clients: 1,
 	pin_pending: true,
+	active_sessions: 0,
 	session: null,
 	stream: null,
 };
@@ -128,6 +131,7 @@ export const statsStatusIdle: StatsStatus = {
 	kind: "native",
 	sample_count: 0,
 	started_unix_ms: 0,
+	elapsed_ms: 0,
 };
 
 // A native-path pipeline: capture → submit → encode → send. Deterministic (no
@@ -171,7 +175,7 @@ export const captureMetas: CaptureMeta[] = [
 		id: "cap-20260628-2041",
 		client: "enricos-macbook",
 		kind: "native",
-		codec: "h265",
+		codec: "hevc",
 		width: 5120,
 		height: 1440,
 		fps: 240,