v0.142.0: offsite repo continuity — orphaned-repo guard (A) + run-status auto-refresh (C)

- Part A: classify restic cat-config failure (wrong-password=orphaned vs no-repo vs other); ORPHANED state + Hungarian card + offbox_repo_orphaned/reset events (once, not nightly); reset = move-aside (never delete) + init, unclaimed auto / claimed confirm. Red-proofs TestOffbox_OrphanDetection_* + ConfirmedReset.
- Part C: GET /backup/offbox/status + poll on backups_remote → flips Fut→Rendben/Hiba without manual reload.

controller/internal/web/handlers.go

@@ -755,6 +755,8 @@ func (s *Server) backupsRemoteHandler(w http.ResponseWriter, r *http.Request) {
 	awaiting, timedOut := offboxCeremonyWaitState(s.settings.GetOffboxTarget())
 	data["OffboxCeremonyAwaiting"] = awaiting
 	data["OffboxCeremonyTimedOut"] = timedOut
+	// v0.142.0 offsite-repo continuity: the orphan card + the auto-refresh (Part C) trigger.
+	data["OffboxOrphaned"] = s.backupMgr != nil && s.backupMgr.OffboxOrphaned()
 	s.executeTemplate(w, r, "backups_remote", data)
 }