F5 (dashboard): surface 'route unpublished' for unhealthy/restarting deployed apps

Traefik only publishes a route to a healthy container, so an unhealthy deployed app
returns 404 at its URL though the container runs — previously shown only as 'Nem
egészséges' with no hint the URL is dead. New routeUnpublished() funcmap helper +
a distinct indicator on the dashboard and stacks cards (gated on .Deployed). Tests:
routeUnpublished across all states, real templateFS parses with the funcmap, and the
card guard renders the indicator only for deployed+unhealthy.

controller/internal/web/templates/style.css

@@ -1249,6 +1249,20 @@ a.stat-card:hover {
     color: var(--orange);
 }
 
+/* F5: an unhealthy/restarting deployed app has its public route withheld by Traefik (404 at the URL). */
+.badge-route-unpublished {
+    background: var(--orange-bg);
+    color: var(--orange);
+    white-space: nowrap;
+}
+.route-unpublished {
+    display: inline-block;
+    margin-top: 2px;
+    font-size: 0.8em;
+    color: var(--orange);
+    white-space: nowrap;
+}
+
 /* Delete modal */
 .modal-overlay {
     position: fixed;