v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

statfs fsclass helper (network/autofs/stub/unknown, fail-open); probe not_network_fs
assertion (stub can never verify — red-proven); deploy-time stub refusal (idle autofs
proceeds — red-proven); distinct stub badge, stub wins over unreachable (unreachable line
byte-identical); deployed select shows stored HDD_PATH (red-proven vs IsDefault-only).
MinAgent unchanged 0.81.0. Gates green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

controller/internal/web/server.go

@@ -77,6 +77,9 @@ type Server struct {
 	// agentLogsFn is the Debug-page agent-tab seam (v0.116.0). nil → the shared
 	// agentClient().DebugLogs; tests inject (incl. the pre-0.83 typed-404 path).
 	agentLogsFn func(ctx context.Context) (agentapi.AgentLogsResponse, error)
+	// classifyFSPath classifies a network path's filesystem in THIS process's namespace (the stub
+	// badge, RCA fix 2). Set to system.ClassifyPathFSTimeout by NewServer; tests inject fake classes.
+	classifyFSPath func(path string) string
 	// netFeatures caches the agent-capability probe (agentapi features.go) for the coupled NAS add
 	// semantics — the add gate + the settings-page banner read it. Zero value ready.
 	netFeatures agentapi.SupportCache
@@ -137,6 +140,7 @@ func NewServer(cfg *config.Config, stackMgr *stacks.Manager, cpuCollector *syste
 		loginAttempts: make(map[string]*loginAttempt),
 		done:          make(chan struct{}),
 	}
+	s.classifyFSPath = system.ClassifyPathFSTimeout
 
 	if cfg.Logging.Level == "debug" {
 		logger.Printf("[DEBUG] [web] NewServer: initializing web server v%s", version)