R-101 + F-DIAG: the restore dialog names the last SUCCESSFUL copy (v0.182.0)

Tier2LastRun is the attempt clock and was rendered as 'Legutóbbi másolat' in the restore
confirm dialog. New LastSuccess + SuccessTracked anchor; tier2Update makes the three
rebuild sites safe by construction. F-DIAG: six distinct causes, target-aware redaction.

controller/internal/web/funcmap.go

@@ -304,6 +304,18 @@ func (s *Server) templateFuncMap() template.FuncMap {
 				return fmt.Sprintf("%d napja", int(d.Hours()/24))
 			}
 		},
+		// fmtTimeStr renders an RFC3339 STRING as an absolute Budapest-local date-time. R-101: the
+		// Tier-2 restore confirm dialog printed a raw RFC3339 stamp ("2026-07-28T01:30:00Z") at the
+		// moment the customer decides whether to restore — a UTC machine timestamp is not something a
+		// customer can reason about. Absolute rather than relative here on purpose: "3 napja" is fine on
+		// a status card, but a restore decision deserves the actual date.
+		"fmtTimeStr": func(s string) string {
+			t, err := time.Parse(time.RFC3339, s)
+			if err != nil {
+				return s
+			}
+			return t.In(loc).Format("2006-01-02 15:04")
+		},
 		"fmtTime": func(t time.Time) string {
 			if t.IsZero() {
 				return "–"