controller v0.265.0: R-634 cause fixed, held apps say so, OOM storm alarm, R-647 leftovers

R-634: a whole-box backup no longer stops/restarts a DEPLOYING app (the
measured cause of containers running under 'not deployed'); StopStack
and StartStack refuse a deploying stack for every caller.
R-625: held badge 'Stopped - restore needed', no Update button.
R-636: kernel oom_kill counter; 20+ in 30 min -> one app_oom_storm.
R-647: held error per reader, copy_holds key, two log wordings.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/i18n/locales/en.json

@@ -571,6 +571,7 @@
   "badge.update.behind.today": " — today",
   "badge.update.current": "Up to date",
   "badge.update.current.title": "This app is running the newest version available.",
+  "badge.update.held": "Stopped — restore needed",
   "catchall.alkalmazas_kezelese": "Manage app",
   "catchall.alkalmazasok": "Apps",
   "catchall.vezerlopult": "Dashboard",

controller/internal/i18n/locales/hu.json

@@ -566,6 +566,7 @@
   "badge.update.behind.today": " — ma",
   "badge.update.current": "Naprakész",
   "badge.update.current.title": "Ez az alkalmazás a legfrissebb elérhető változatot futtatja.",
+  "badge.update.held": "Megállítva — visszaállítás szükséges",
   "catchall.alkalmazas_kezelese": "Alkalmazás kezelése",
   "catchall.alkalmazasok": "Alkalmazások",
   "catchall.vezerlopult": "Vezérlőpult",