R-270: the local_api drift detector also names a TOKEN-only divergence

A rotation that reached bootstrap.json but not controller.yaml left the
agent channel at 401 across restarts while the endpoint-only detector
stayed silent. The tokens are now compared (constant time, boolean only);
the token case gets its own banner key and operator message. Still
detection only - nothing is reconciled (R-78).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/i18n/locales/en.json

@@ -13,6 +13,7 @@
   "alert.deadapp.single": "An installed app is not running: %s",
   "alert.deadapp.single_state": "An installed app is not running: %s (%s)",
   "alert.endpoint_drift": "The storage agent's address in the settings is out of date.",
+  "alert.local_api_token_drift": "The access key of the storage agent in the settings is out of date.",
   "alert.hub.disabled": "The hub connection is off — central monitoring is not running",
   "alert.hub.unreachable": "The hub cannot be reached — last error: %s",
   "alert.link.monitoring": "System monitor",

controller/internal/i18n/locales/hu.json

@@ -11,6 +11,7 @@
   "alert.deadapp.single": "Telepített alkalmazás nem fut: %s",
   "alert.deadapp.single_state": "Telepített alkalmazás nem fut: %s (%s)",
   "alert.endpoint_drift": "A tárolókezelő ügynök címe elavult a beállításokban.",
+  "alert.local_api_token_drift": "A tárolókezelő ügynök hozzáférési kulcsa elavult a beállításokban.",
   "alert.hub.disabled": "Hub kapcsolat kikapcsolva — a központi monitoring nem aktív",
   "alert.hub.unreachable": "Hub nem elérhető — utolsó hiba: %s",
   "alert.link.monitoring": "Rendszermonitor",